9.8
Critical
CVE-2023-46257 An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could…
Description
An attacker sending specially crafted data packets to the Mobile Device Server can cause memory corruption which could result to a Denial of Service (DoS) or code execution.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Avalanche | 6.4.1 | No fix stated |
References
- download.wavelink.com download.wavelink.com
Timeline
- Published
- Last modified
Other CVEs of Avalanche
The 93 CVEs of Avalanche →
CVE-2025-8297
Incomplete restriction of configuration in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated…
7.2
High
CVE-2025-8296
SQL injection in Ivanti Avalanche before version 6.4.8.8008 allows a remote authenticated attacker with admin privileges…
7.2
High
CVE-2023-38036
A security vulnerability within Ivanti Avalanche Manager before version 6.4.1 may allow an unauthenticated attacker to…
9.8
Critical
CVE-2024-13181
Path Traversal in Ivanti Avalanche before version 6.4.7 allows a remote unauthenticated attacker to bypass…
7.3
High