CVE-2023-41724

high · 8.8

A command injection vulnerability in Ivanti Sentry prior to 9.19.0 allows unauthenticated threat actor to execute arbitrary commands on the underlying operating system of the appliance within the same physical or logical network.

8.8

CVSS

12.8%

EPSS (exploit prob.)

96th

EPSS percentile

2024-03-31

Published

CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses

CWE-77CWE-94

Affected products

Vendor	Product	Affected versions
ivanti	standalone_sentry	< 9.19.0

Check a specific version with /api/v1/cve/match.

References

https://forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentry
https://forums.ivanti.com/s/article/CVE-2023-41724-Remote-Code-Execution-for-Ivanti-Standalone-Sentry

Query this programmatically:

curl https://evil-db.io/api/v1/cve/CVE-2023-41724