Vulnerability identifier: #VU79810

Vulnerability risk: Critical

CVSSv3.1: 9.4 [CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H/E:H/RL:O/RC:C]

CVE-ID: CVE-2023-38035

CWE-ID: CWE-287

Exploitation vector: Network

Exploits in database: 6

• May 13, 2024
  • CVE-2023-38035 (Ivanti Sentry CVE-2023-38035) [Github]
• March 22, 2024
  • CVE-2023-38035 (Script to exploit CVE-2023-38035) [Github]
• September 13, 2023
  • Ivanti Sentry MICSLogService Auth Bypass resulting in RCE (CVE-2023-38035) [Metasploit]
• September 5, 2023
  • MICS_Hunter (Script to exploit CVE-2023-38035) [Github]
• August 28, 2023
  • sentryexploit (CVE-2023-38035 Recon oriented exploit, extract company name contact information) [Github]
• August 24, 2023
  • CVE-2023-38035.py [Custom exploits]

Impact: Code execution

Vulnerable software:
MobileIron Sentry
Server applications / IDS/IPS systems, Firewalls and proxy servers

Vendor: