Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2023-46805

Quick assessment

Affected
Ivanti ICS
Exploitation
Confirmed exploitation in the wild; remediate immediately
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Ivanti ICS是美国Ivanti公司的一代远程安全访问产品。 Ivanti ICS 9.x版本、22.x版本、Ivanti Policy Secure存在授权问题漏洞，该漏洞源于 Web 组件中存在身份验证绕过漏洞。攻击者利用该漏洞可以绕过控制检查来访问受限资源。

AI Predicted 9.8 Difficulty: Trivial KEV · Ransomware EPSS 99.99% · P100

Affected Version Matrix 4

VendorProduct Version RangeStatus
Ivanti ICS 9.1R18≤ 9.1R18 affected
22.6R2≤ 22.6R2 affected
Ivanti IPS 9.1R18≤ 9.1R18 affected
22.6R1≤ 22.6R1 affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2023-46805

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5
Vulnerability Title
Ivanti ICS 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Ivanti ICS是美国Ivanti公司的一代远程安全访问产品。 Ivanti ICS 9.x版本、22.x版本、Ivanti Policy Secure存在授权问题漏洞，该漏洞源于 Web 组件中存在身份验证绕过漏洞。攻击者利用该漏洞可以绕过控制检查来访问受限资源。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Shenlong Deep Dive — AI Deep Analysis

10-question deep dive: root cause, exploitation, mitigation, urgency. Read summary free, full version requires login.

Read summary Full analysis (login)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Ivanti ICS 9.1R18 ~ 9.1R18 -
Ivanti IPS 9.1R18 ~ 9.1R18 -

II. Public POCs for CVE-2023-46805

# POC Description Source Link Shenlong Link
1 Quick scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. https://github.com/yoryio/CVE-2023-46805_CVE-2024-21887_Scanner POC Details
2 Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices https://github.com/cbeek-r7/CVE-2023-46805 POC Details
3 Tool for checking the Ivanti Connect Secure System Snapshot for IOCs related to CVE-2023-46805 and CVE-2024-21887 https://github.com/rxwx/pulse-meter POC Details
4 None https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887 POC Details
5 Here is a script to check vulns CVE-2023-46805 and CVE-2024-21887 https://github.com/TheRedDevil1/Check-Vulns-Script POC Details
6 The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist. https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887 POC Details
7 CVE-2023-46805 scanner for possible vulnerable Ivanti Connect Secure appliances by country using Shodan. https://github.com/yoryio/CVE-2023-46805 POC Details
8 Mitigation validation utility for the Ivanti Connect Around attack chain, comprising CVE-2023-46805 and CVE-2024-21887. https://github.com/seajaysec/Ivanti-Connect-Around-Scan POC Details
9 Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research https://github.com/Chocapikk/CVE-2023-46805 POC Details
10 None https://github.com/mickdec/CVE-2023-46805_CVE-2024-21887_scan_grouped POC Details
11 CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner. https://github.com/w2xim3/CVE-2023-46805 POC Details
12 Ivanti ICS - Authentication Bypass https://github.com/Cappricio-Securities/CVE-2023-46805 POC Details
13 None https://github.com/maybeheisenberg/CVE-2023-46805 POC Details
14 A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887. https://github.com/Hexastrike/Ivanti-Secure-Connect-Logs-Parser POC Details
15 A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887. https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser POC Details
16 An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks. https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46805.yaml POC Details
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2023-46805

请登录查看更多情报信息。

Other References for CVE-2023-46805 (1)

IV. Related Vulnerabilities

Same product: ICS
Same vendor: Ivanti

V. Comments for CVE-2023-46805

No comments yet

Leave a comment