Cyber Threat Report: 'Ivanti Connect Secure: Journey to the core of the DSLog backdoor'

Report Author Orange Cyberdefense
Publication Date 2024-02-09
Original Reporting Source
Identified CVEs CVE-2024-21887 , CVE-2024-21888 , CVE-2024-21893 , CVE-2023-46805

The CERT at Orange report on the exploitation of multiple vulnerabilities in Ivanti products. Following successful exploitation, the attackers installed the DSLog backdoor. The report provides technical details of the attack including indicators of compromise (IoCs) as well as a discovery timeline and recommendations for protecting against attack.

Cyber Threat Graph Context

Explore how this report relates to the wider threat graph