High severity7.5NVD Advisory· Published Oct 8, 2024· Updated Jun 17, 2026

CVE-2024-47007

Description

A NULL pointer dereference in WLAvalancheService.exe of Ivanti Avalanche before version 6.4.5 allows a remote unauthenticated attacker to cause a denial of service.

Affected products

Ivanti/Avalanchellm-fuzzy3 versions
<6.4.5+ 2 more
- (no CPE)range: <6.4.5
- cpe:2.3:a:ivanti:avalanche:*:*:*:*:premise:*:*:*range: <6.4.5
- (no CPE)range: 6.4.5

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-AdvisorynvdVendor Advisory

News mentions

No linked articles in our index yet.

cvss	0.488
epss	0.001
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000