CVE-2023-35077: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

An out-of-bounds write vulnerability was identified in Ivanti AntiVirus Product running on Windows operating systems. The vulnerability was assigned CVE-2023-35077 and was disclosed on July 21, 2023. This security flaw affects Ivanti AntiVirus Product versions prior to 7.9.1.285 (NVD).

The vulnerability is classified as an out-of-bounds write (CWE-787) issue. According to the CVSS v3.1 scoring, it has received a High severity rating with a base score of 7.5 from NIST and 8.1 from HackerOne. The vulnerability vector string is CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H, indicating that it is network accessible, requires low attack complexity, and needs no privileges or user interaction to exploit (NVD).

When exploited, this vulnerability causes the Ivanti AntiVirus Product to crash, resulting in a denial of service condition. The CVSS metrics indicate that while there is no impact on confidentiality or integrity, there is a high impact on availability (NVD).

The recommended mitigation is to update to Ivanti AV Product version 7.9.1.285 or above. This update addresses the out-of-bounds write vulnerability and prevents the system crash issue (NVD).