What is the CVSS score of CVE-2023-46805?

CVE-2023-46805 has a CVSS 3.1 base score of 8.2 (High). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N. EPSS exploitation probability: 94.4%.

Which versions of Connect Secure are affected by CVE-2023-46805?

CVE-2023-46805 presents notable security risk, a improper authentication vulnerability rated CVSS 8.2.

Is there a public PoC exploit available for CVE-2023-46805?

Yes, a public proof-of-concept exploit is available for CVE-2023-46805. Prioritise patching immediately. EPSS: 94.4%.

How to fix or mitigate CVE-2023-46805?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Audit authentication configurations and rotate any potentially compromised credentials.

Connect Secure CVE-2023-46805

HIGH

Improper Authentication (CWE-287)

2024-01-12 support@hackerone.com

Authentication Bypass Ivanti Connect Secure Policy Secure

8.2

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

8.2 HIGH

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

Low

Availability

None

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:19 vuln.today

Added to CISA KEV

Oct 31, 2025 - 21:59 cisa

CISA KEV

PoC Detected

Oct 31, 2025 - 21:59 vuln.today

Public exploit code

CVE Published

Jan 12, 2024 - 17:15 nvd

HIGH 8.2

DescriptionNVD

An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.

AnalysisAI

Ivanti Connect Secure and Policy Secure contain an authentication bypass in the web component allowing unauthenticated access to restricted resources, chained with CVE-2024-21887 for unauthenticated RCE in massive exploitation campaigns starting January 2024.

Technical ContextAI

The CWE-287 authentication bypass allows attackers to circumvent web component access controls through crafted requests. Chained with CVE-2024-21887 (command injection), this enables unauthenticated remote code execution on Ivanti VPN appliances.

RemediationAI

Apply Ivanti patches. CISA recommends factory reset before patching due to persistent implant concerns. Rotate all credentials. Run Ivanti's Integrity Checker Tool. Consider migrating to alternative VPN solutions.