CVE-2022-44574: An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.

PriorityP265high7.5CVSS 3.1

AVNACLPRNUINSUCNIHAN

EPSS

64.82%

99.1th percentile

An improper authentication vulnerability exists in Avalanche version 6.3.x and below allows unauthenticated attacker to modify properties on specific port.

Affected

1 ranges

Vendor	Product	Version range	Fixed in
ivanti	avalanche	< 6.4.0	6.4.0

Detection & IOCsextracted from sources · hover to see the quote

→Unauthenticated attacker can modify properties on a specific port in Ivanti Avalanche 6.3.x and below; monitor for unexpected unauthenticated property-modification requests targeting Avalanche service ports ↗

·The advisory does not disclose the specific port number targeted by the unauthenticated property-modification attack, limiting precise port-based detection rules. ↗
·Affected versions are Ivanti Avalanche 6.3.x and below; no patch version or workaround details are provided in the available source material. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.