Skip to content
OpenAdvisories
High · 8.2 Known exploited · Ransomware Scanner template Public exploit CVE-2023-46805 EUVD-2023-50971GHSA-m2pj-mjhw-x9fm

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to ac…

Published Jan 12, 2024 · Updated Oct 1, 2026 · Assigned by hackerone

Vendor: ivanti Product: ICS Product: IPS Category: Network devices

Description

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

Affected products

VendorProductAffectedFixed
Ivanti ICS 9.1R18 – ≤ 9.1R18, 22.6R2 – ≤ 22.6R2 —
Ivanti IPS 9.1R18 – ≤ 9.1R18, 22.6R1 – ≤ 22.6R1 —

Public exploits

Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.

Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.

Metasploit 1 module

GitHub 9 repositories

  • duy-31/CVE-2023-46805_CVE-2024-21887 ★ 23 · Jan 16, 2024

    An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

  • Chocapikk/CVE-2023-46805 ★ 14 · Jan 19, 2024

    Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research

  • seajaysec/Ivanti-Connect-Around-Scan ★ 12 · Jan 19, 2024

    Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.

  • yoryio/CVE-2023-46805 ★ 10 · Jan 14, 2024

    Scanner for CVE-2023-46805 - Ivanti Connect Secure

  • Hexastrike/Ivanti-Connect-Secure-Logs-Parser ★ 6 · Jan 19, 2025

    A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.

  • raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887 ★ 5 · Jan 18, 2024

    The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.

  • cbeek-r7/CVE-2023-46805 ★ 5 · Jan 16, 2024

    Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices

  • w2xim3/CVE-2023-46805 ★ 2 · Jan 25, 2024

    CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.

  • rxwx/pulse-meter ★ 1 · Jan 14, 2025

    Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.

Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Advisories 1

References