A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days
MentionsIvantiIvanti Connect Secure
Volexity has identified active in-the-wild exploitation of a vulnerability chain allowing unauthenticated remote code execution in Ivanti Connect Secure VPN devices. Ivanti has published an advisory providing upgrade instructions to […] The post A Series of Unauthenticated Events: Chained Exploitation of Ivanti Connect Secure Zero-Days appeared first on Volexity .
Summary from Volexity.
Explained
The technology and terms in this story. Learn more
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- TechnologyVPN · Virtual private networkAn encrypted tunnel that puts a remote device on a private network, as if it were plugged in at the office.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
Related coverage
Other sources covering the same vulnerabilities or event.