Affected Systems
Ivanti Sentry (specific versions not disclosed in summary). Vulnerabilities enable root-level remote code execution and authentication bypass. CVE identifiers not yet assigned or published.
Exploitation Status
CERT.BE issued critical warning indicating immediate patching required. Active exploitation status unknown, but severity and CERT advisory suggest high risk. No PoC availability mentioned.
Business Impact
Organizations running Ivanti Sentry face critical risk of complete system compromise via root-level RCE and authentication bypass. Attackers could gain full administrative control, exfiltrate data, pivot to internal networks, or deploy ransomware. Ivanti products have been heavily targeted in recent years. Immediate action required to prevent exploitation.
Urgency
🔴 Immediate
Recommended Actions
- Identify all Ivanti Sentry instances in your environment immediately and isolate from internet if possible
- Apply vendor patches as soon as released by Ivanti - monitor Ivanti security advisories continuously
- Review Ivanti Sentry access logs for suspicious authentication attempts or unusual administrative activity
- Implement network segmentation to limit Ivanti Sentry exposure and restrict access to trusted management networks only
- If patching cannot be completed within 24 hours, consider taking Ivanti Sentry offline until patches are applied