CVE-2021-42130

CVE-2021-42130 is a critical deserialization of untrusted data vulnerability affecting Ivanti Avalanche versions prior to 6.3.3. An authenticated attacker with access to the Inforail Service can exploit this flaw to achieve arbitrary code execution. With a CVSS score of 8.8 (High), this vulnerability presents a significant risk due to its low attack complexity and severe impact on confidentiality, integrity, and availability. While no public exploits or active exploitation have been observed, and community discussion is minimal, its high EPSS and FAUCET Risk Score indicate a strong potential for future exploitation.