{"cves":{"cve":{"cveNumber":"CVE-2024-47007","cveUrl":"https://nvd.nist.gov/vuln/detail/CVE-2024-47007"}},"description":"Ivanti Avalanche是Ivanti公司推出的一套企业移动设备管理系统。\n\nIvanti Avalanche存在空指针解引用漏洞，该漏洞源于WLAvalancheService.exe存在空指针解引用漏洞，攻击者可利用该漏洞导致拒绝服务。","formalWay":"目前厂商已发布升级程序修复该安全问题，详情见厂商官网:\r\nhttps://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","isEvent":"通用软硬件漏洞","number":"CNVD-2026-43377","openTime":"2026-10-30","patchDescription":"Ivanti Avalanche是Ivanti公司推出的一套企业移动设备管理系统。\r\n\r\nIvanti Avalanche存在空指针解引用漏洞，该漏洞源于WLAvalancheService.exe存在空指针解引用漏洞，攻击者可利用该漏洞导致拒绝服务。目前，供应商发布了安全公告及相关补丁信息，修复了此漏洞。","patchName":"Ivanti Avalanche空指针解引用漏洞（CNVD-2026-43377）的补丁","products":{"product":"Ivanti Ivanti Avalanche <6.4.5"},"referenceLink":"https://forums.ivanti.com/s/article/Ivanti-Avalanche-6-4-5-Security-Advisory","serverity":"高","submitTime":"2024-10-13","title":"Ivanti Avalanche空指针解引用漏洞（CNVD-2026-43377）"}