Authentication bypass by spoofing in ICS before version 25.1.3.0 allows a remote unauthenticated attacker to execute arbitrary commands. This does not impact ICS version 22.7R2.14 or prior.
[
{
"nodes": [
{
"operator": "OR",
"negate": false,
"cpeMatch": [
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
"versionStartIncluding": "25.1.0.0",
"versionEndExcluding": "25.1.1.2",
"matchCriteriaId": "51F9201D-EF2F-4750-846E-912827761A9F"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:*:*:*:*:*:*:*:*",
"versionStartIncluding": "25.1.2.0",
"versionEndExcluding": "25.1.3.0",
"matchCriteriaId": "822E7CEB-9AB2-4B0E-B87A-B9718503466A"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2:*:*:*:*:*:*",
"matchCriteriaId": "56FEC223-8FF7-4A05-9577-CFFE0AA6526C"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.1:*:*:*:*:*:*",
"matchCriteriaId": "5569D323-6ADF-4B16-822D-FBA6760356C3"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.2:*:*:*:*:*:*",
"matchCriteriaId": "FF4D400F-49DA-4C5F-8F63-5A15738360AE"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.3:*:*:*:*:*:*",
"matchCriteriaId": "9CA7EF35-D0BC-4714-A38A-91660BE1BA55"
},
{
"vulnerable": true,
"criteria": "cpe:2.3:a:ivanti:connect_secure:22.8:r2.4:*:*:*:*:*:*",
"matchCriteriaId": "F22EC396-A447-4175-8A30-C8DC10ACFFE9"
}
]
}
]
}
] Get the CyboWatch SIEM platform, hosting, and 24×7 SOC analysts. Send an enquiry, or call or email us to get started.