CISA Urges Agencies to Upgrade or Remove End-of-Life Ivanti Appliance

The Cybersecurity and Infrastructure Security Agency (CISA) has called upon federal agencies and organizations to take immediate action concerning a critical vulnerability affecting Ivanti Cloud Services Appliance (CSA) 4.6.

The vulnerability, CVE-2024-8190, poses a significant threat as it allows cyber threat actors to execute OS command injections, potentially gaining control over affected systems.

CVE-2024-8190: A Critical Threat

Ivanti has confirmed that this vulnerability has been limitedly exploited, emphasizing the urgency of users addressing this issue promptly.

The vulnerability CVE-2024-8190 has been discovered in all versions of Ivanti CSA 4.6 before patch 519.

Decoding Compliance: What CISOs Need to Know – Join Free Webinar

This OS command injection vulnerability is particularly concerning as attackers can exploit it to execute arbitrary commands on the underlying operating system, compromising the affected systems’ security and integrity.

In response to this critical vulnerability, Ivanti has released a security update and strongly advises its customers to upgrade to CSA version 5.0. It is important to note that Ivanti CSA 4.6 has reached its end-of-life status and is no longer supported by the company.

This means that affected users are at increased risk if they do not upgrade to the latest version or remove the obsolete appliance.

CISA’s Directive and Guidance

CISA, in collaboration with the FBI, has issued joint guidance on mitigating OS command injection vulnerabilities. It urges users and administrators to review the Ivanti security advisory and implement the recommended updates.

Furthermore, CISA has added CVE-2024-8190 to its Known Exploited Vulnerabilities Catalog.

Under the Binding Operational Directive (BOD) 22-01: Reducing the Significant Risk of Known Exploited Vulnerabilities, Federal Civilian Executive Branch (FCEB) agencies are mandated to remediate identified vulnerabilities by the specified due date to safeguard their networks against active threats.

Organizations must remain vigilant and proactive in addressing vulnerabilities as cyber threats evolve.

The call to action by CISA highlights the importance of maintaining up-to-date systems and adhering to security advisories.

Agencies and organizations using Ivanti CSA 4.6 are urged to upgrade to version 5.0 or remove the outdated appliance to mitigate the risk of exploitation.

By taking these necessary steps, organizations can enhance their cybersecurity posture and protect their critical infrastructure from cyberattacks.

The collaboration between CISA, the FBI, and Ivanti underscores the collective effort required to combat cybersecurity threats and ensure the safety of digital environments.

Simulating Cyberattack Scenarios With All-in-One Cybersecurity Platform – Watch Free Webinar