An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.
https://thehackernews.com/2025/07/chinese-hackers-exploit-ivanti-csa-zero.html
https://cyberscoop.com/france-government-ivanti-zero-days-china/
https://www.infosecurity-magazine.com/news/chinese-hackers-france-ivanti/
https://www.databreachtoday.com/chinese-hackers-exploited-ivanti-flaw-in-france-a-28888
https://therecord.media/france-anssi-report-ivanti-bugs-exploited
https://www.infosecurity-magazine.com/news/cisa-fbi-warn-chained-attacks/
https://www.darkreading.com/vulnerabilities-threats/cisa-ivanti-vulns-chained-attacks
https://www.cisa.gov/news-events/cybersecurity-advisories/aa25-022a
https://thehackernews.com/2024/10/nation-state-attackers-exploiting.html
https://thehackernews.com/2024/10/zero-day-alert-three-critical-ivanti.html
Published: 2024-10-08
Updated: 2024-10-10
Known Exploited Vulnerability (KEV)
Base Score: 8.3
Vector: CVSS2#AV:N/AC:L/Au:M/C:C/I:C/A:C
Severity: High
Base Score: 7.2
Vector: CVSS:3.0/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Severity: High
EPSS: 0.85104
Tenable Research has classified this CVE under the following Vulnerability Watch classification, which includes active and historical (inactive) classifications. You can learn more about these classifications on our blog.
Vulnerability of Interest