CVE-2024-47908

CVE-2024-47908 is an OS command injection vulnerability (CWE-78) present in the admin web console of Ivanti Cloud Services Appliance (CSA) versions before 5.0.5. This flaw enables remote code execution and carries a CVSS v3.1 base score of 9.1 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H). The vulnerability was published on 2025-02-11.

A remote authenticated attacker possessing administrative privileges can exploit this vulnerability through the admin web console to inject and execute arbitrary operating system commands, resulting in remote code execution on the affected appliance.

Ivanti has published a security advisory addressing CVE-2024-47908, available at https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Cloud-Services-Application-CSA-CVE-2024-47908-CVE-2024-11771, which covers mitigation steps including upgrading to Ivanti CSA version 5.0.5 or later.