CVE-2024-9420:
Description
A use-after-free in Ivanti Connect Secure before version 22.7R2.3 and 9.1R18.9
and Ivanti Policy Secure before version 22.7R1.2 allows a remote authenticated attacker to achieve remote code execution
Classification
CVE ID: CVE-2024-9420
Affected Products
Vendor: Ivanti
Product: Connect Secure
Exploit Prediction Scoring System (EPSS)
EPSS Score: 0.05% (probability of being exploited)
EPSS Percentile: 21.56% (scored less or equal to compared to others)
EPSS Date: 2025-02-03 (when was this score calculated)