Overall OneWatch Score: 8.3 / 10 (CRITICAL)
| Category | Score (out of 10) | Assessment |
|---|---|---|
| Widespread Impact | 6.5 | Potential compromise of Ivanti Sentry infrastructure, managed devices, and connected enterprise resources. |
| Accessibility | 9.5 | Remote exploitation requires no authentication and no user interaction. |
| Triggerability | 8 | Exploitation is highly repeatable and reliable once the attack path is understood. |
| Consequence | 9.5 | Can result in full administrative access, root-level code execution, persistence, and lateral movement. |
| Hidden Exposure | 8 | Attackers can create legitimate administrative accounts and maintain access with limited visibility. |
