Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-9843
Analyzed
More InfoOfficial Page
Source-3c1d8aa1-5a33-4ea4-8992-aadd6440af75
View Known Exploited Vulnerability (KEV) details
Published At-12 Nov, 2024 | 17:15
Updated At-17 Jan, 2025 | 20:00

A buffer over-read in Ivanti Secure Access Client before 22.7R4 allows a local unauthenticated attacker to cause a denial of service.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
N/A
Metrics
TypeVersionBase scoreBase severityVector
Secondary3.15.0MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:N/I:N/A:H
Primary3.15.5MEDIUM
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H
CPE Matches

Ivanti Software
ivanti
>>secure_access_client>>Versions before 22.7(exclusive)
cpe:2.3:a:ivanti:secure_access_client:*:*:*:*:*:*:*:*
Ivanti Software
ivanti
>>secure_access_client>>22.7
cpe:2.3:a:ivanti:secure_access_client:22.7:-:*:*:*:*:*:*
Ivanti Software
ivanti
>>secure_access_client>>22.7
cpe:2.3:a:ivanti:secure_access_client:22.7:r1:*:*:*:*:*:*
Ivanti Software
ivanti
>>secure_access_client>>22.7
cpe:2.3:a:ivanti:secure_access_client:22.7:r1.1:*:*:*:*:*:*
Ivanti Software
ivanti
>>secure_access_client>>22.7
cpe:2.3:a:ivanti:secure_access_client:22.7:r2:*:*:*:*:*:*
Ivanti Software
ivanti
>>secure_access_client>>22.7
cpe:2.3:a:ivanti:secure_access_client:22.7:r3:*:*:*:*:*:*
Apple Inc.
apple
>>macos>>-
cpe:2.3:o:apple:macos:-:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
CWE-126Secondary3c1d8aa1-5a33-4ea4-8992-aadd6440af75
CWE-125Primarynvd@nist.gov
Evaluator Description

Evaluator Impact

Evaluator Solution

Vendor Statements

References
HyperlinkSourceResource
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Connect-Secure-ICS-Ivanti-Policy-Secure-IPS-Ivanti-Secure-Access-Client-ISAC-Multiple-CVEs3c1d8aa1-5a33-4ea4-8992-aadd6440af75
Vendor Advisory
Change History
0Changes found

Details not found