"Ivanti Resolves Critical RCE Vulnerability Reported by NATO"

TL;DR
Ivanti has issued patches for critical vulnerabilities in its Standalone Sentry and Neurons for ITSM solutions, following reports from NATO Cyber Security Centre researchers. The flaws could allow unauthenticated attackers to execute arbitrary commands and pose a significant risk to organizations. While the company has not observed any active exploitation, it urges immediate patching to ensure protection. Additionally, nation-state actors have previously targeted Ivanti vulnerabilities, emphasizing the importance of prompt mitigation measures.
- Ivanti fixes critical Standalone Sentry bug reported by NATO BleepingComputer
- Ivanti Releases Urgent Fix for Critical Sentry RCE Vulnerability The Hacker News
- Ivanti fixes RCE vulnerability reported by NATO cybersecurity researchers (CVE-2023-41724) Help Net Security
- Critical RCE vulnerability patched by Ivanti TechRadar
- Immediate patching of critical Ivanti vulnerabilities urged SC Media
Want the full story? Read the original reporting
Read on BleepingComputer