Out-of-Bounds Write Vulnerability in Ivanti AntiVirus Product for Windows
CVE-2023-35077

8.1HIGH

Key Information:

Vendor

Ivanti
Status
Endpoint Manager
Vendor
CVE Published:
21 July 2023

What is CVE-2023-35077?

An out-of-bounds write vulnerability has been identified in the Ivanti AntiVirus product designed for Windows operating systems. This flaw can lead to the product crashing, potentially exposing systems to security risks. Users are strongly encouraged to update to Ivanti AntiVirus Product version 7.9.1.285 or higher to mitigate the issue and ensure continued protection against threats. For detailed information, please refer to the Ivanti support article.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Endpoint Manager 7.9.1.285

References

https://forums.ivanti.com/s/article/SA-2023-07-19-CVE-202...

CVSS V3.1

Score:
8.1
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
High
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.