Skip to content
~/pwn.watch_

Get notified

Get an email when a new major security incident drops. No spam, unsubscribe any time.

Only used for pwn.watch incident emails. Protected by Cloudflare Turnstile.

Ivanti Connect Secure

Security incidents tagged Ivanti Connect Secure. Newest first.

0 Ivanti Connect Secure incidents in the last 12 months

Critical 4 · High 3 · Med 2 · Low 1 · Update ½LessMore
Incidents
1
Live
0
Patched
1
Days without an incident
996
Longest quiet run: 996 days (Feb 1–Oct 23)
RSS JSON llms.txtAll tags →
Show 1 older incident

January 2024 1

  • PatchedIvanti Connect Secure zero-days chained for mass VPN compromise

    Ivanti Connect Secure and Policy Secure / Connect Secure, Policy Secure, and Neurons

    Two Ivanti Connect Secure and Policy Secure zero-days, an authentication bypass (CVE-2023-46805) and a command injection (CVE-2024-21887), were chained for unauthenticated remote code execution on internet-facing VPN gateways. Volexity found them in the wild in December 2023 and disclosed them on 2024-01-10. A third bug, an SSRF in the SAML component (CVE-2024-21893), was exploited later in January. CISA issued Emergency Directive 24-01 and then ordered federal agencies to disconnect all Ivanti Connect Secure and Policy Secure appliances. Added to the CISA KEV catalog on 2024-01-10, 2024-01-31. CISA lists known use in ransomware campaigns.

    Open incident →CVE-2023-46805 · CVE-2024-21887 · CVE-2024-21893

Sponsored

Buy sponsor slot · $149/mo