CVE-2024-8190

The vulnerable software is Ivanti Cloud Services Appliance, specifically versions 4.6 Patch 518 and earlier. An OS command injection vulnerability in these versions allows a remote authenticated attacker to obtain remote code execution, but the attacker must have admin level privileges to exploit this vulnerability. A proof-of-concept (PoC) exploit for this flaw has been released, and it is being actively exploited in the wild. Ivanti has advised patching or upgrading to version 5.0 to mitigate the risks. The US Cybersecurity and Infrastructure Security Agency (CISA) has added this vulnerability to its Known Exploited Vulnerabilities catalog, and users are urged to upgrade to CSA version 5.0 or remove it from service by October 4, 2024. The vulnerable versions are: