CVE-2024-8190

CVE-2024-8190 is a high-severity vulnerability in Ivanti's Cloud Services Appliance (CSA) that allows for remote code execution. This flaw in software design or implementation was actively exploited, posing significant risks to the security of systems running Ivanti CSA. The vulnerability resulted from an OS command injection issue affecting all versions of Ivanti CSA 4.6 prior to patch 519. Ivanti confirmed the exploitation and promptly responded by releasing a security update to address this vulnerability. The update specifically targets and fixes the OS command injection vulnerability present in the CSA 4.6, thereby preventing potential unauthorized remote code execution. All users of the Ivanti CSA are strongly advised to apply the security update immediately, especially if they are using any version before patch 519, to mitigate the risk posed by CVE-2024-8190. In addition to Ivanti's security update, Check Point Intrusion Prevention System (IPS) also provides protection against this threat. This adds an extra layer of defense for organizations, helping to further secure their systems from potential attacks exploiting CVE-2024-8190. It is recommended that organizations use both the Ivanti security update and Check Point IPS to ensure comprehensive protection against this high-severity vulnerability.