Untitled attachment

Notices where this attachment appears

1. Embed this notice
   The Shadowserver Foundation (shadowserver@infosec.exchange)'s status on Friday, 19-Jan-2024 20:03:30 JST The Shadowserver Foundation

   Scanning for vulnerable Ivanti Connect Secure (CVE-2023-46805 & CVE-2024-21887) instances has been added to our daily scan list. 6809 found vulnerable for 2024-01-15 scans using methodology from
   @watchtowrcyber
   - https://labs.watchtowr.com/welcome-to-2024-the-sslvpn-chaos-continues-ivanti-cve-2023-46805-cve-2024-21887/

   More details: https://shadowserver.org/what-we-do/network-reporting/vulnerable-http-report/

   These are instances that we believe have NOT applied the mitigation provided by Ivanti: https://forums.ivanti.com/s/article/KB-CVE-2023-46805-Authentication-Bypass-CVE-2024-21887-Command-Injection-for-Ivanti-Connect-Secure-and-Ivanti-Policy-Secure-Gateways?language=en_US

   IP data will start being reported out tomorrow (2024-01-16) along with Dashboard stats updates.

   Subscribe for free vulnerability data (and more) for your network: https://shadowserver.org/what-we-do/network-reporting/get-reports/