Ivanti has notified customers of a serious remote code execution vulnerability that affects Standalone Sentry and is advising them to update their systems right away to remain safe from possible online attacks.
The vulnerability, identified as CVE-2023-41724, has a 9.6 CVSS score. Within the same physical or logical network, an unauthenticated threat actor can execute arbitrary commands on the appliance’s underlying operating system, according to the business.
The bug affects previous versions as well as all supported versions 9.17.0, 9.18.0, and 9.19.0. The 9.17.1, 9.18.1, and 9.19.1 patch, according to the corporation, is now available for download through the usual download channel.
The NATO Cyber Security Center’s Vincent Hutsebaut read more Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability.
Get up to date on the latest cybersecurity news and enhance your knowledge of cybersecurity with our thorough coverage of the dangers, breaches, and solutions.