Lucene search
HackeroneCVE-2022-35258HistoryDec 05, 2022 - 10:15 p.m.
CVE-2022-35258
2022-12-0522:15:10
CWE-682
CWE-128
hackerone
web.nvd.nist.gov
49
cve-2022-35258
denial of service
dos
ivanti
connect secure
policy secure
neurons
vulnerability
security advisory
nvd
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.3%
An unauthenticated attacker can cause a denial-of-service to the following products: Ivanti Connect Secure (ICS) in versions prior to 9.1R14.3, 9.1R15.2, 9.1R16.2, and 22.2R4, Ivanti Policy Secure (IPS) in versions prior to 9.1R17 and 22.3R1, and Ivanti Neurons for Zero-Trust Access in versions prior to 22.3R1.
Affected configurations
Node
ivanticonnect_secureRange<9.1
ORivanticonnect_secureMatch9.1-
ORivanticonnect_secureMatch9.1r1
ORivanticonnect_secureMatch9.1r1.0
ORivanticonnect_secureMatch9.1r10.0
ORivanticonnect_secureMatch9.1r10.2
ORivanticonnect_secureMatch9.1r11.0
ORivanticonnect_secureMatch9.1r11.1
ORivanticonnect_secureMatch9.1r11.3
ORivanticonnect_secureMatch9.1r11.4
ORivanticonnect_secureMatch9.1r11.5
ORivanticonnect_secureMatch9.1r12
ORivanticonnect_secureMatch9.1r12.1
ORivanticonnect_secureMatch9.1r12.2
ORivanticonnect_secureMatch9.1r13
ORivanticonnect_secureMatch9.1r13.1
ORivanticonnect_secureMatch9.1r14
ORivanticonnect_secureMatch9.1r15
ORivanticonnect_secureMatch9.1r16
ORivanticonnect_secureMatch9.1r16.1
ORivanticonnect_secureMatch9.1r2
ORivanticonnect_secureMatch9.1r2.0
ORivanticonnect_secureMatch9.1r3
ORivanticonnect_secureMatch9.1r3.0
ORivanticonnect_secureMatch9.1r4
ORivanticonnect_secureMatch9.1r4.0
ORivanticonnect_secureMatch9.1r4.1
ORivanticonnect_secureMatch9.1r4.2
ORivanticonnect_secureMatch9.1r4.3
ORivanticonnect_secureMatch9.1r5
ORivanticonnect_secureMatch9.1r5.0
ORivanticonnect_secureMatch9.1r6
ORivanticonnect_secureMatch9.1r6.0
ORivanticonnect_secureMatch9.1r7
ORivanticonnect_secureMatch9.1r7.0
ORivanticonnect_secureMatch9.1r8
ORivanticonnect_secureMatch9.1r8.0
ORivanticonnect_secureMatch9.1r8.1
ORivanticonnect_secureMatch9.1r8.2
ORivanticonnect_secureMatch9.1r8.4
ORivanticonnect_secureMatch9.1r9
ORivanticonnect_secureMatch9.1r9.0
ORivanticonnect_secureMatch9.1r9.1
ORivanticonnect_secureMatch9.1r9.2
ORivanticonnect_secureMatch21.9r1
ORivanticonnect_secureMatch21.12r1
ORivanticonnect_secureMatch22.1r1
ORivanticonnect_secureMatch22.2-
ORivanticonnect_secureMatch22.2r1
ORivantineurons_for_zero-trust_accessMatch22.2r1
ORivantipolicy_secureRange<9.1
ORivantipolicy_secureMatch9.1-
ORivantipolicy_secureMatch9.1r1
ORivantipolicy_secureMatch9.1r10
ORivantipolicy_secureMatch9.1r11
ORivantipolicy_secureMatch9.1r12
ORivantipolicy_secureMatch9.1r13
ORivantipolicy_secureMatch9.1r13.1
ORivantipolicy_secureMatch9.1r14
ORivantipolicy_secureMatch9.1r15
ORivantipolicy_secureMatch9.1r16
ORivantipolicy_secureMatch9.1r2
ORivantipolicy_secureMatch9.1r3
ORivantipolicy_secureMatch9.1r3.1
ORivantipolicy_secureMatch9.1r4
ORivantipolicy_secureMatch9.1r4.1
ORivantipolicy_secureMatch9.1r4.2
ORivantipolicy_secureMatch9.1r5
ORivantipolicy_secureMatch9.1r6
ORivantipolicy_secureMatch9.1r7
ORivantipolicy_secureMatch9.1r8
ORivantipolicy_secureMatch9.1r8.1
ORivantipolicy_secureMatch9.1r8.2
ORivantipolicy_secureMatch9.1r9
ORivantipolicy_secureMatch22.1r1
ORivantipolicy_secureMatch22.2r1
| Vendor | Product | Version | CPE |
|---|---|---|---|
| ivanti | connect_secure | * | cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:-:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r1.0:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r10.0:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:* |
| ivanti | connect_secure | 9.1 | cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:* |
CNA Affected
[
{
"vendor": "n/a",
"product": "Ivanti Connect Secure (ICS), Ivanti Policy Secure (IPS), and Ivanti Neurons for Zero Trust Access Gateway",
"versions": [
{
"version": "ICS Prior to 9.1R14.3,9.1R15.2,9.1R16.2 and 22.2R4, IPS Prior to 9.1R17 and 22.3R1, Ivanti Neurons for Zero Trust Access Gateway Prior to 22.3R1",
"status": "affected"
}
]
}
]Related
cvelist
cvelist
CVE-2022-35258
2022-12-05 00:00:00
prion
prion
Code injection
2022-12-05 22:15:00
nvd
nvd
CVE-2022-35258
2022-12-05 22:15:10
CVSS3
7.5
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
EPSS
0.001
Percentile
40.3%
Related for CVE-2022-35258