VYPR
← All advisories
High severity8.8NVD Advisory· Published Oct 18, 2024· Updated Jun 17, 2026

CVE-2024-37404

CVE-2024-37404

Description

Improper Input Validation in the admin portal of Ivanti Connect Secure before 22.7R2.1 and 9.1R18.9, or Ivanti Policy Secure before 22.7R1.1 allows a remote authenticated attacker to achieve remote code execution.

Affected products

62
  • Ivanti/Connect Secure57 versions
    cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*+ 56 more
    • cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*range: <9.1
    • cpe:2.3:a:ivanti:connect_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:22.7:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r10:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.0:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11.5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r11:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r12:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r13:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r14:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r15:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r16:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r17:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18.8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r18:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4.3:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r5:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r6:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r7:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8.4:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r8:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.1:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9.2:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:connect_secure:9.1:r9:*:*:*:*:*:*
    • (no CPE)range: <22.7R2.1, <9.1R18.9
    • (no CPE)range: 22.7R2.1
  • Ivanti/Policy Secure5 versions
    cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*+ 4 more
    • cpe:2.3:a:ivanti:policy_secure:*:*:*:*:*:*:*:*range: <22.7
    • cpe:2.3:a:ivanti:policy_secure:22.7:-:*:*:*:*:*:*
    • cpe:2.3:a:ivanti:policy_secure:22.7:r1:*:*:*:*:*:*
    • (no CPE)range: <22.7R1.1
    • (no CPE)range: 22.7R1.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.