The vendor had originally assessed the flaw as low risk but now says it is a critical issue that enables remote code execution.
First seen on darkreading.com
Jump to article: www.darkreading.com/vulnerabilities-threats/china-linked-threat-group-exploits-ivanti-bug