Lucene search

K
nessusThis script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.IVANTI_AVALANCHE_CVE-2023-32560.NBIN
HistorySep 04, 2023 - 12:00 a.m.

Ivanti Avalanche Unauthenticated Stack-based Buffer Overflow (CVE-2023-32560)

2023-09-0400:00:00
This script is Copyright (C) 2023-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
11
ivanti avalanche scanner unauthenticated buffer overflow stack-based cve-2023-32560

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.692

Percentile

98.1%

The Ivanti Avalanche running on the remote host is affected by a stack-based buffer overflow vulnerability. An unauthenticated, remote attacker can exploit this issue, via a specially crafted message, to cause service disruption or arbitrary code execution.

Binary data ivanti_avalanche_cve-2023-32560.nbin

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.692

Percentile

98.1%