CVE-2023-32560 (published 2023-08-10T19:07:38.628Z)
An attacker can send a specially crafted message to the Wavelink Avalanche Manager, which could result in service disruption or arbitrary code execution.

Thanks to a Researcher at Tenable for finding and reporting.

Fixed in version 6.4.1.
Affected products: Vendor: Ivanti
Product: Avalanche
Versions: 6.4.1