cbcvebase.
CVE-2024-29205
published 2024-04-25

CVE-2024-29205: An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x…

PriorityP347high7.5CVSS 3.0
AVNACLPRNUINSUCNINAH
EPSS
1.58%
72.5th percentile
An Improper Check for Unusual or Exceptional Conditions vulnerability in the web component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure (9.x, 22.x) allows a remote unauthenticated attacker to send specially crafted requests in-order-to cause service disruptions.

Affected

19 ranges
VendorProductVersion rangeFixed in
ivanticonnect_secure>= 22.1R6.2 < 22.1R6.222.1R6.2
ivanticonnect_secure>= 22.2R3 < 22.2R322.2R3
ivanticonnect_secure>= 22.2R4.2 < 22.2R4.222.2R4.2
ivanticonnect_secure>= 22.3R1.2 < 22.3R1.222.3R1.2
ivanticonnect_secure>= 22.4R1.2 < 22.4R1.222.4R1.2
ivanticonnect_secure>= 22.4R2.4 < 22.4R2.422.4R2.4
ivanticonnect_secure>= 22.5R1.3 < 22.5R1.322.5R1.3
ivanticonnect_secure>= 22.5R2.4 < 22.5R2.422.5R2.4
ivanticonnect_secure>= 22.6R1.2 < 22.6R1.222.6R1.2
ivanticonnect_secure>= 22.6R2.3 < 22.6R2.322.6R2.3
ivanticonnect_secure>= 9.1R14.6 < 9.1R14.69.1R14.6
ivanticonnect_secure>= 9.1R15.4 < 9.1R15.49.1R15.4
ivanticonnect_secure>= 9.1R16.4 < 9.1R16.49.1R16.4
ivanticonnect_secure>= 9.1R17.4 < 9.1R17.49.1R17.4
ivanticonnect_secure>= 9.1R18.5 < 9.1R18.59.1R18.5
ivantipolicy_secure>= 22.2R3 < 22.2R322.2R3
ivantipolicy_secure>= 22.5R1.3 < 22.5R1.322.5R1.3
ivantipolicy_secure>= 9.1R17.4 < 9.1R17.49.1R17.4
ivantipolicy_secure>= 9.1R18.5 < 9.1R18.59.1R18.5
Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.