{"schema":"vulnpedia.poc/1","cve":"CVE-2023-46805","generated":"2026-10-26T06:59:15.268Z","kev":{"since":"2024-01-10","ransomware":true},"epss":{"score":0.99984,"percentile":0.99983},"cvss":{"version":"3.1","score":8.2,"severity":"HIGH","vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:L/A:N"},"has_public_poc":true,"poc_sources":[{"kind":"metasploit","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2023_46805.rb","executable":true,"sourceId":"exploit/linux/http/ivanti_connect_secure_rce_cve_2023_46805","description":"Ivanti Connect Secure Unauthenticated Remote Code Execution","verification":"catalogued","source":"metasploit","modified":"2026-04-22 11:54:55 +0000","origins":[{"source":"metasploit","sourceId":"exploit/linux/http/ivanti_connect_secure_rce_cve_2023_46805","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2023_46805.rb"},{"source":"metasploit","sourceId":"exploit/linux/http/ivanti_connect_secure_rce_cve_2023_46805","modified":"2026-04-22 11:54:55 +0000","url":"https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_connect_secure_rce_cve_2023_46805.rb"}]},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/c6e9fbe8f33b","executable":false,"sourceId":"c6e9fbe8f33b","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"c6e9fbe8f33b","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/c6e9fbe8f33b"}],"repositoryUrl":"https://github.com/Chocapikk/CVE-2023-46805"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/861831be04bb","executable":false,"sourceId":"861831be04bb","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"861831be04bb","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/861831be04bb"}],"repositoryUrl":"https://github.com/zwxxb/CVE-2023-21887"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/d3238b74c459","executable":false,"sourceId":"d3238b74c459","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"d3238b74c459","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/d3238b74c459"}],"repositoryUrl":"https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/94604f97e3be","executable":false,"sourceId":"94604f97e3be","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"94604f97e3be","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/94604f97e3be"}],"repositoryUrl":"https://github.com/w2xim3/CVE-2023-46805"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/7d5d8ce1a955","executable":false,"sourceId":"7d5d8ce1a955","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"7d5d8ce1a955","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/7d5d8ce1a955"}],"repositoryUrl":"https://github.com/seajaysec/Ivanti-Connect-Around-Scan"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/a797febede5b","executable":false,"sourceId":"a797febede5b","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"a797febede5b","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/a797febede5b"}],"repositoryUrl":"https://github.com/yoryio/CVE-2023-46805"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/8aaf3b1980d0","executable":false,"sourceId":"8aaf3b1980d0","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"8aaf3b1980d0","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/8aaf3b1980d0"}],"repositoryUrl":"https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887"},{"kind":"vulncheck-xdb","url":"https://vulncheck.com/xdb/676e0bcf48b8","executable":false,"sourceId":"676e0bcf48b8","verification":"catalogued","source":"vulncheck-kev","modified":"2024-01-10T00:00:00Z","origins":[{"source":"vulncheck-kev","sourceId":"676e0bcf48b8","modified":"2024-01-10T00:00:00Z","url":"https://vulncheck.com/xdb/676e0bcf48b8"}],"repositoryUrl":"https://github.com/mickdec/CVE-2023-46805_CVE-2024-21887_scan_grouped"}],"poc_candidates":[{"url":"https://github.com/yoryio/CVE-2023-46805","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"Scanner for CVE-2023-46805 - Ivanti Connect Secure","modified":"2024-08-12T20:33:09Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/yoryio/CVE-2023-46805"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2024-08-12T20:33:09Z","url":"https://github.com/yoryio/CVE-2023-46805"}],"tags":[]},{"url":"https://github.com/cbeek-r7/CVE-2023-46805","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"Simple scanner for scanning a list of ip-addresses for vulnerable Ivanti Pulse Secure devices","modified":"2025-09-06T03:46:00Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/cbeek-r7/CVE-2023-46805"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2025-09-06T03:46:00Z","url":"https://github.com/cbeek-r7/CVE-2023-46805"}],"tags":[]},{"url":"https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"An authentication bypass vulnerability in the web component of Ivanti ICS 9.x, 22.x and Ivanti Policy Secure allows a remote attacker to access restricted resources by bypassing control checks.","modified":"2026-02-03T03:08:39Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2026-02-03T03:08:39Z","url":"https://github.com/duy-31/CVE-2023-46805_CVE-2024-21887"}],"tags":[]},{"url":"https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"The script in this repository only checks whether the vulnerabilities specified in the Ivanti Connect Secure product exist.","modified":"2024-12-31T18:42:04Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2024-12-31T18:42:04Z","url":"https://github.com/raminkarimkhani1996/CVE-2023-46805_CVE-2024-21887"}],"tags":[]},{"url":"https://github.com/seajaysec/Ivanti-Connect-Around-Scan","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"Mitigation validation utility for the Ivanti Connect Around attack chain. Runs multiple checks. CVE-2023-46805, CVE-2024-21887.","modified":"2024-04-05T07:44:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/seajaysec/Ivanti-Connect-Around-Scan"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2024-04-05T07:44:30Z","url":"https://github.com/seajaysec/Ivanti-Connect-Around-Scan"}],"tags":[]},{"url":"https://github.com/Chocapikk/CVE-2023-46805","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"Ivanti Pulse Secure CVE-2023-46805 Scanner - Based on Assetnote's Research","modified":"2026-08-10T14:45:08Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/Chocapikk/CVE-2023-46805"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2026-08-10T14:45:08Z","url":"https://github.com/Chocapikk/CVE-2023-46805"}],"tags":[]},{"url":"https://github.com/w2xim3/CVE-2023-46805","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"CVE-2023-46805 Ivanti POC RCE - Ultra fast scanner.","modified":"2024-01-31T02:24:37Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/w2xim3/CVE-2023-46805"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2024-01-31T02:24:37Z","url":"https://github.com/w2xim3/CVE-2023-46805"}],"tags":[]},{"url":"https://github.com/rxwx/pulse-meter","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"Parses the System Snapshot from an Ivanti Connect Secure applicance to identify possible IOCs related to CVE-2023-46805, CVE-2024-21887 and CVE-2025-0282.","modified":"2025-02-21T16:57:58Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/rxwx/pulse-meter"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2025-02-21T16:57:58Z","url":"https://github.com/rxwx/pulse-meter"}],"tags":[]},{"url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser","source":"poc-in-github","sourceId":"CVE-2023-46805","description":"A Python script for examining Ivanti Secure Connect (ICS) event logs, designed to support investigations into vulnerabilities CVE-2025-0282, CVE-2023-46805, and CVE-2024-21887.","modified":"2026-10-17T10:30:30Z","verification":"unverified","origins":[{"source":"poc-in-github","sourceId":"CVE-2023-46805","url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser"},{"source":"poc-in-github","sourceId":"CVE-2023-46805","modified":"2026-10-17T10:30:30Z","url":"https://github.com/Hexastrike/Ivanti-Connect-Secure-Logs-Parser"}],"tags":[]}],"test_commands":[{"tool":"nuclei","cmd":"nuclei -id CVE-2023-46805 -u https://TARGET","note":"Detection template — review its checks and affected versions before use."},{"tool":"poc.json","cmd":"curl -s https://vulnpedia.com/cve/CVE-2023-46805/poc.json","note":"Machine-readable PoC index for this CVE (for automation)."}],"detection_sources":[{"kind":"nuclei","url":"https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2023/CVE-2023-46805.yaml","template":"http/cves/2023/CVE-2023-46805.yaml","executable":true}],"discovery_links":[{"kind":"github-search","url":"https://github.com/search?q=%22CVE-2023-46805%22&type=repositories","executable":false}]}