Ivanti patches two more Connect Secure zero-days chained in attacks
Summary
Ivanti has released security updates to patch two additional zero-day vulnerabilities in its Connect Secure (ICS) remote access gateway. These flaws have reportedly been chained together in attacks since at least October 1st. The company has not yet disclosed the CVE IDs or specific details of the vulnerabilities.
IFF Assessment
The discovery and exploitation of zero-day vulnerabilities in widely used remote access solutions represent a direct threat to organizations, enabling attackers to gain unauthorized access.
Severity
The CVSS score is estimated high due to the zero-day nature of the vulnerabilities, their chaining in attacks, and the critical function of remote access gateways, suggesting a significant potential for impact and exploitability.
Defender Context
Organizations using Ivanti Connect Secure must prioritize patching these newly disclosed vulnerabilities to mitigate the risk of exploitation. The chaining of these zero-days highlights the importance of staying vigilant against sophisticated attack techniques and ensuring robust logging and monitoring are in place to detect potential compromises.