Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor ยท updates https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 Four Ivanti Cloud Services Appliance (CSA) bugs were exploited in 2024: a command injection (CVE-2024-8190), a path traversal admin bypass (CVE-2024-8963), and later a SQL injection and another command injection (CVE-2024-9379, CVE-2024-9380). FortiGuard Incident Response found a suspected nation-state actor chaining them. CSA 4.6 was end-of-life; Ivanti urged upgrading to CSA 5.0. Added to the CISA KEV catalog on 2024-09-13, 2024-09-19, 2024-10-09. en Fri, 11 Oct 2024 00:00:00 GMT Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: FortiGuard Labs details the zero-day chain used against Ivanti CSA https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-10-11-ed603a22 Fri, 11 Oct 2024 00:00:00 GMT critical <p><a href="https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-9379 to the KEV catalog (federal deadline 2024-10-30) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-10-09-4384e744 Wed, 09 Oct 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-9380 to the KEV catalog (federal deadline 2024-10-30) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-10-09-1982d0d8 Wed, 09 Oct 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-9379 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-10-08-a2189532 Tue, 08 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9379">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-9380 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-10-08-566bc41e Tue, 08 Oct 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-9380">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-8963 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-09-19-29862c76 Thu, 19 Sep 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-8963">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-8963 to the KEV catalog (federal deadline 2024-10-10) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-09-19-288886f9 Thu, 19 Sep 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CISA added CVE-2024-8190 to the KEV catalog (federal deadline 2024-10-04) https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-09-13-e37ac196 Fri, 13 Sep 2024 00:00:00 GMT critical <p><a href="https://www.cisa.gov/known-exploited-vulnerabilities-catalog">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: CVE-2024-8190 published https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-09-10-821d68ff Tue, 10 Sep 2024 00:00:00 GMT critical <p><a href="https://nvd.nist.gov/vuln/detail/CVE-2024-8190">Source</a></p> Ivanti Cloud Services Appliance zero-days chained by a suspected nation-state actor: Ivanti publishes the advisory for CVE-2024-8190 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380 https://pwn.watch/i/ivanti-cloud-services-appliance-zero-days-cve-2024-8190-8963-9379-9380#2024-09-10-3281d2ec Tue, 10 Sep 2024 00:00:00 GMT critical <p><a href="https://www.fortinet.com/blog/threat-research/burning-zero-days-suspected-nation-state-adversary-targets-ivanti-csa">Source</a></p>