Unrated severityNVD Advisory· Published Aug 10, 2023· Updated Mar 6, 2025

CVE-2023-32560

Description

An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.

Thanks to a Researcher at Tenable for finding and reporting.

Fixed in version 6.4.1.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

Ivanti/Wavelink Avalanche Managerllm-create
Range: <6.4.1
Ivanti/Avalanchecpe-rescue
Range: 6.4.1

Patches

Vulnerability mechanics

No source-code context for this CVE — mechanics is only generated when we can read the actual fix diff. Without that, the four sections (root cause, attack vector, affected code, fix) would be speculation rather than analysis.

References

packetstormsecurity.com/files/174459/Ivanti-Avalance-Remote-Code-Execution.htmlmitre
packetstormsecurity.com/files/174698/Ivanti-Avalanche-MDM-Buffer-Overflow.htmlmitre
forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1mitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.079
exploit	0.030
kev	0.000
patch	0.000
ransomware	0.000