CVE-2024-39712

published 2024-11-13

CVE-2024-39712: Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated…

Priority P3 56 critical 9.1 CVSS 3.0

AV N AC L PR H UI N S C C H I H A H

Argument injection in Ivanti Connect Secure before version 22.7R2.1 and 9.1R18.7 and Ivanti Policy Secure before version 22.7R1.1 allows a remote authenticated attacker with admin privileges to achieve remote code execution.

Affected

7 ranges

Vendor	Product	Version range	Fixed in
ivanti	connect_secure	< 22.7	22.7
ivanti	connect_secure	—	—
ivanti	connect_secure	>= 22.7R2.1 < 22.7R2.1	22.7R2.1
ivanti	connect_secure	>= 9.1R18.7 < 9.1R18.7	9.1R18.7
ivanti	policy_secure	< 22.7	22.7
ivanti	policy_secure	—	—
ivanti	policy_secure	>= 22.7R1.1 < 22.7R1.1	22.7R1.1

Detection & IOCs extracted from sources · hover to see the quote

• → Argument injection vulnerability (CWE-88) in Ivanti Connect Secure and Ivanti Policy Secure — monitor for anomalous argument-injection patterns in admin-authenticated requests that could lead to remote code execution ↗

• · Exploitation requires a remote authenticated attacker with admin privileges — prioritize monitoring and hardening of admin accounts and admin-facing interfaces on affected Ivanti products. ↗
• · Affected versions: Ivanti Connect Secure before 22.7R2.1 and 9.1R18.7; Ivanti Policy Secure before 22.7R1.1 — ensure patching to these versions or later. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-88