CVE-2024-22061: 
Ivanti Avalanche vulnerability analysis and mitigation

A Heap Overflow vulnerability (CVE-2024-22061) was discovered in the WLInfoRailService component of Ivanti Avalanche before version 6.4.3. The vulnerability was disclosed in April 2024 and affects Ivanti Avalanche's Mobile Device Management (MDM) solution, which is used for remotely managing devices and updates (SOCRadar).

The vulnerability is a heap overflow issue in the WLInfoRailService component that allows remote code execution. It received a CVSS v3.0 score of 8.1 (High severity) and has been classified under CWE-77 (Improper Neutralization of Special Elements used in a Command). The vulnerability requires no authentication for exploitation and can be triggered remotely (NVD, CIS).

If successfully exploited, the vulnerability allows an unauthenticated remote attacker to execute arbitrary commands on the affected system. This could potentially enable attackers to install programs, view, change, or delete data, depending on the system privileges (CIS).

As of April 2024, Ivanti has stated that they are unaware of any customers being exploited by this vulnerability prior to its public disclosure (SOCRadar).

The vulnerability has been patched in Ivanti Avalanche version 6.4.3. Organizations are strongly advised to upgrade to this version to mitigate the risk. The update can be accessed through Wawelink (SOCRadar).