CVE-2024-8190

HIGH

7.2

CVSS Score

Published: September 10, 2024 at 08:33 PM UTC

Updated: June 17, 2026 at 08:22 AM UTC

2 products affected across 1 vendorCloud Services ApplianceEndpoint Manager Cloud Services Appliance

Using CSA (Cloud Services Appliance) by Ivanti?

Get instant alerts when new vulnerabilities affect CSA (Cloud Services Appliance) - before attackers find them.

Real-time alertsTrack your software stackFree plan available

Start Free Sign In

Severity

HIGH7.2

Exploitation

CISA KEV

Exploit prediction

EPSS 89%

SSVC

Active

Actively Exploited

CISA Known Exploited Vulnerabilities (KEV) Catalog

EPSS Score88.5%

EPSS (Exploit Prediction Scoring System) estimates a 88.5% chance this CVE is exploited in the wild within the next 30 days — higher than 100% of all CVEs. It complements CVSS: a high EPSS on a mid-severity CVE can still be urgent.

Ivanti Cloud Services Appliance (CSA) contains an OS command injection vulnerability in the administrative console which can allow an authenticated attacker with application admin privileges to pass commands to the underlying OS.

Required Action

As Ivanti CSA has reached End-of-Life status, users are urged to remove CSA 4.6.x from service or upgrade to the 5.0.x line of supported solutions, as future vulnerabilities on the 4.6.x version of CSA are unlikely to receive future security updates.

Ransomware Use

Unknown

Added to KEV

Sep 13, 2024

Remediation Due

Oct 4, 2024

752 days overdue

Notes

https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Service-Appliance-CSA-CVE-2024-8190

https://nvd.nist.gov/vuln/detail/CVE-2024-8190

Description

An OS command injection vulnerability in Ivanti Cloud Services Appliance versions 4.6 Patch 518 and before allows a remote authenticated attacker to obtain remote code execution. The attacker must have admin level privileges to exploit this vulnerability.