Executive Risk Summary
"A null pointer dereference vulnerability in Ivanti Connect Secure and Ivanti Policy Secure allows a remote unauthenticated attacker to cause a denial of service. This vulnerability affects versions prior to 22.7R2.1 for Ivanti Connect Secure and 22.7R1.1 for Ivanti Policy Secure."
Operational Audit Arsenal
Target Type Firmware Image
Target Asset Ivanti Connect Secure/Ivanti Policy Secure Firmware
Standard Path Global Firmware
Manual Verification Required
This is a non-Windows asset (Ivanti). Use the target asset details and official path provided above to verify your current version against the official vendor advisories listed below.
Patch Impact Forecast
Reboot Required Likely
Network connectivity may be disrupted during the update process
Internal Work Notes
Ivanti Connect Secure and Ivanti Policy Secure vulnerability - apply version 22.7R2.1 or later for Ivanti Connect Secure and 22.7R1.1 or later for Ivanti Policy Secure to mitigate denial of service risk
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Ivanti Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.