Vulnerabilities

CVSS

7.2 High

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Risk score

100.0

Known exploited

CISA KEVEU KEV

Published

2024-10-08

Status

Analyzed

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

Weaknesses

CWE-77CWE-78

Coverage 1

threat-intel

FBI Disrupts China-Linked QTFY Infrastructure Used to Steal Data From U.S. Organizations

The FBI has disrupted a Chinese-linked hacking infrastructure, QScan and QTRouter, operated by the group QTFY, which has been targeting U.S. critical infrastructure since 2018. These tools were used to steal data and con…

The Hacker News · 3d ago High

CVE-2024-8190CVE-2024-8963CVE-2024-9380CHcyber espionageiotproxy

All articles mentioning it

Advisories and references

• forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Servi...
• cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...