CVE-2024-9380

An OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2 allows a remote authenticated attacker with admin privileges to obtain remote code execution.

Score

CVSS 3.1 7.2 High

Status

Analyzed - 3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Published

2024-10-08

Last modified

2025-10-21

Known exploited (CISA KEV)

since 2024-10-09, action due 2024-10-30: As Ivanti CSA 4.6.x has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line, or later, of supported solution.

Weaknesses

CWE-77, CWE-78

Affected products

• Csa Cloud Services Appliance (Ivanti)
• Endpoint Manager Cloud Services Appliance (Ivanti)

References

• https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-CSA-Cloud-Services-Appliance-CVE-2024-9379-CVE-2024-9380-C…
• https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9380