CVE-2022-43555 - Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability

HIGH

Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability

Published Nov 3, 2023

7.8

HIGH

CVSS 3.1

EPSS 0.46%

Ivanti Avalanche Printer Device Service Missing Authentication Local Privilege Escalation Vulnerability

Vendor Ivanti Product Avalanche Default
unaffected
Affected
- ≥ 6.4.1.236, < 6.4.1.236

Default status is the baseline for the product. Each version can override it (patched versions can be marked unaffected).

Vendor	Product	Default status	Versions
Ivanti	Avalanche	unaffected	Affected ≥ 6.4.1.236, < 6.4.1.236

No remediation recorded yet.

Weaknesses (1)

CWE-306

Missing Authentication

Link	Providers	Tags
https://download.wavelink.com/Files/avalanche_v6.4.1.236_release_notes.txt		Release Notes
https://euvd.enisa.europa.eu/vulnerability/EUVD-2022-46552		Advisory

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner hackerone

Published Nov 3, 2023

Updated Sep 4, 2024

Reserved Oct 20, 2022

CISA Vulnrichment

Updated Sep 4, 2024

NVD

Status Modified

Modified Jun 17, 2026

Red Hat

No data

ENISA EUVD

Assigner hackerone

Published Nov 3, 2023

Updated Sep 4, 2024

GitHub

No data