Unrated severityNVD Advisory· Published Mar 31, 2024· Updated Mar 25, 2025

CVE-2023-41724

Description

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.

Affected products

Getsentry/Sentryllm-fuzzy
Range: <9.19.0
Ivanti/Sentryv5
Range: 9.19.0

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentrymitre

News mentions

No linked articles in our index yet.

cvss	0.000
epss	0.010
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000