CVE-2024-24996

Critical · 9.8

CVSS

9.8

EPSS

32.2%

Published

Apr 19, 2024

CISA due date

—

The record

A Heap overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to execute arbitrary commands.

Affected packages

Ecosystem	Package	Introduced	Fixed