CVE-2023-32560 PoC — Ivanti Avalanche 缓冲区错误漏洞

Source

https://github.com/x0rb3l/CVE-2023-32560

Associated Vulnerability

Title: Ivanti Avalanche 缓冲区错误漏洞 (CVE-2023-32560)
Description:An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution. Thanks to a Researcher at Tenable for finding and reporting. Fixed in version 6.4.1.

Description

Ivanti Avalanche v6.4.0.0 RCE POC

Readme

# CVE-2023-32560
Ivanti Avalanche v6.4.0.0 RCE POC

![image](CVE-2023-32560.jpeg)

Reference:
https://www.tenable.com/security/research/tra-2023-27

File Snapshot

Remarks

1. It is advised to access via the original source first.

2. Local POC snapshots are reserved for subscribers — if the original source is unavailable, the local mirror is part of the paid plan.

View subscription plans →