skip navigation

Manchester Digital

skip mega-menu

Security Bulletin: Critical Vulnerabilities in Ivanti Avalanche (CVE-2024-29204, CVE-2024-24996)

#infosec #Cyber #cyber #cyber security

View Profile

View More Posts

Summary of Bulletin:

On April 16, 2024, Ivanti disclosed two critical vulnerabilities within its Avalanche Mobile Device Management (MDM) solution. These vulnerabilities, identified as CVE-2024-29204 and CVE-2024-24996, are heap overflow issues in the WLInfoRailService and WLAvalancheService components, respectively.
Both vulnerabilities have been assigned a CVSS score of 9.8, indicating their critical nature due to the potential for unauthenticated Remote Code Execution (RCE) in low-complexity attacks.
We are recommending to customers that they upgrade to the latest version of Ivanti Avalanche.

Related Posts

Add Post View All

Posted by Defendza

Defendza Cyber Security Tips - Remote Working Advice

Posted by Edge Testing

Eurofins SAFER@WORK™

Posted by NHS Shared Business Services

New framework to help protect NHS and public sector against cyber threats

Posted by Datum Datacentres

US Tech Company Partners with Leading UK Cloud Computing Provider Teledata to “Offer Most Secure Technology Available” for its UK and European Customers

Posted by Information Commissioner's Office

Tech careers at ICO

Posted by The North West Cyber Resilience Centre

New Partnership with the Greater Manchester Chamber of Commerce and Cyber Resilience Centre

Posted by The North West Cyber Resilience Centre

New Trusted Partners Announced by the Cyber Resilience Centre for Greater Manchester

Posted by The North West Cyber Resilience Centre

Free Cyber Security Support for Education Providers Announced

Posted by The North West Cyber Resilience Centre

What is the Cyber Resilience Centre for Greater Manchester?

Posted by Silverchip Ltd

Route To Tech Podcast