Protecting Networks from Opportunistic Ivanti Pulse Secure Vulnerability Exploitation
Essential information
- Published
- 10/05/2024 09:06
- Modified
- 10/05/2024 09:27
- Tags
- 2024-05-05 2024-05-06 2024-05-07 2024-05-08 2024-05-09 2024-05-10 CVE-2023-46805 CVE-2024-21887 botnet ivanti mirai
- Related entities
- 2 vulnerabilities (cve), 23 observables, 6 techniques (mitre), 1 malware
Description
Juniper Threat Labs has observed attempts to exploit Ivanti Pulse Secure authentication bypass and remote code execution vulnerabilities (CVE-2023-46805 and CVE-2024-21887), leading to the delivery of Mirai botnet payloads. This analysis explores the vulnerabilities, exploitation methods, observed payloads, and Juniper's response, highlighting the importance of understanding and mitigating these threats to protect network security.