CVE-2024-23531

HIGH

Ivanti Avalanche < 6.4.3 - Unauthenticated Integer Overflow in WLInfoRailService

Title source: llm
STIX 2.1

Description

An Integer Overflow vulnerability in WLInfoRailService component of Ivanti Avalanche before 6.4.3 allows an unauthenticated remote attacker to perform denial of service attacks. In certain rare conditions this could also lead to reading content from memory.

References (1)

Core 1

Scores

CVSS v3 7.5
EPSS 0.0447
EPSS Percentile 89.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable yes
Technical Impact partial

Details

CWE
CWE-190
Status published
Products (1)
ivanti/avalanche < 6.4.3.528
Published Apr 19, 2024
Tracked Since Feb 18, 2026