An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
ivanti avalanche |
Ivanti warns of critical flaws in its Avalanche MDM solution By Sergiu Gatlan April 16, 2024 03:52 PM 0 Ivanti has released security updates to fix 27 vulnerabilities in its Avalanche mobile device management (MDM) solution, two of them critical heap overflows that can be exploited for remote command execution. Avalanche is used by enterprise admins to remotely manage, deploy software, and schedule updates across large fleets of over 100,000 mobile devices from a single central location. As the ...
Vulmon