Apply the security updates released by Ivanti for Connect Secure, Policy Secure, and Neurons immediately. Federal agencies must follow the timelines specified in CISA Binding Operational Directive 24-01. Organizations should monitor Ivanti's security advisories for specific patch versions and release notes. Prioritize patching of internet-facing Ivanti appliances.
Quick answers
What is CVE-2024-34071?
Apply the security updates released by Ivanti for Connect Secure, Policy Secure, and Neurons immediately. Federal agencies must follow the timelines specified in CISA Binding Operational Directive 24-01. Organizations should monitor Ivanti's security advisories for specific patch versions and release notes. Prioritize patching of internet-facing Ivanti appliances.
How severe is CVE-2024-34071?
critical, CVSS 9.8
Is CVE-2024-34071 known to be exploited?
It is not marked known-exploited in this record.
How should CVE-2024-34071 be mitigated?
Apply the security updates released by Ivanti for Connect Secure, Policy Secure, and Neurons immediately. Federal agencies must follow the timelines specified in CISA Binding Operational Directive 24-01. Organizations should monitor Ivanti's security advisories for specific patch versions and release notes. Prioritize patching of internet-facing Ivanti appliances.
Apply the security updates released by Ivanti for Connect Secure, Policy Secure, and Neurons immediately. Federal agencies must follow the timelines specified in CISA Binding Operational Directive 24-01. Organizations should monitor Ivanti's security advisories for specific patch versions and release notes. Prioritize patching of internet-facing Ivanti appliances.
The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has added a critical vulnerability in Ivanti Connect Secure and Ivanti Policy Secure to its Known Exploited Vulnerabilities (KEV) catalog, citing active exploitation in the wild since at least October 1st, 2024. The agency has issued Binding Operational Directive (BOD) 24-01 requiring federal civilian executive branch agencies to patch the flaw within a specified timeframe. Ivanti has released security updates addressing the vulnerability, which affects Connect Secure, Policy Secure, and Neurons platforms.
