FlagThis

CyberSecurity updates
Updated: 2024-10-30 14:09:22 Pacfic
informationsecuritybuzz.com
CISA Warns of Actively Exploited Ivanti Virtual Traffic Manager (vTM) Vulnerability, CVE-2024-7593 - 3d

Read more: informationsecuritybuzz.com

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has issued an urgent advisory about an actively exploited vulnerability in Ivanti Virtual Traffic Manager (vTM), a widely deployed application delivery controller. This vulnerability, CVE-2024-7593, allows for unauthenticated remote code execution (RCE) and has been assigned a CVSS score of 9.8, indicating a critical severity level. Attackers can exploit this flaw to gain complete control of vulnerable systems, potentially disrupting services, stealing data, or launching further attacks. CISA urges organizations to prioritize patching their vTM systems and implementing appropriate security controls to mitigate the risks.

References:
  • cyble.com - This blog post details the CVE-2024-7593 vulnerability in Ivanti VTM and provides recommendations for remediation. - 4d
  • securityaffairs.com - This article reports on CISA adding the Ivanti VTM vulnerability to its Known Exploited Vulnerabilities catalog. - 4d
  • www.cisa.gov - This CISA alert highlights the addition of CVE-2024-7593 to its Known Exploited Vulnerabilities catalog. - 4d
  • socradar.io - Critical Ivanti vTM Vulnerability Exploited (CVE-2024-7593); pgAdmin Flaw Could Expose Data (CVE-2024-9014) - 4d
  • forums.ivanti.com - Ivanti’s advisory further warned that a publicly available Proof-of-Concept (PoC) exploit exists, making this vulnerability especially dangerous. - 4d
  • malware.news - Attackers can remotely add rogue admin accounts using the authentication bypass flaw. - 4d
  • www.icscybersecurityconference.com - The vulnerability in Ivanti’s Virtual Traffic Manager (vTM), first addressed in a mid-August advisory by the company, has now been flagged by CISA as actively exploited and added to the Catalog. - 4d
  • www.scworld.com - A vulnerability in Ivanti’s Virtual Traffic Manager (vTM), first addressed in a mid-August advisory by the company, has now been flagged by CISA as actively exploited and added to the Catalog. - 4d

Classification:
  • HashTags: Ivanti vTM Vulnerability Exploited
  • Company: Ivanti
  • Target: Organizations using Ivanti vTM
  • Product: Virtual Traffic Manager (vTM)
  • Feature: Application Delivery Controlle
  • Type: Vulnerability
  • Severity: Major

This site is an experimental news aggregator using feeds I personally follow. You can reach me using contacts documented at my website here (https://royans.net/) if you have feedback. You can also find FlagThis at Mastodon.