CVE-2024-21894

Published Apr 4, 2024·Updated Jun 17, 2026

NVD Description

A heap overflow vulnerability in IPSec component of Ivanti Connect Secure (9.x, 22.x) and Ivanti Policy Secure allows an unauthenticated malicious user to send specially crafted requests in-order-to crash the service thereby causing a DoS attack. In certain conditions this may lead to execution of arbitrary code

Public Exploits & PoCs2 found

PoC: CVE-2024-21894-POC

Exploit CVE-2024-21894 for Vulnerable Ivanti Connect Secure and Policy Secure Gateways POC

PoC: CVE-2024-21894-Proof-of-concept

POC for new Ivanti RCE explosed 16000 VPN Gateways

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

References

View on NVD Search GitHub Search Google

Get alerted for CVEs like this

Start monitoring free