An unauthenticated attacker could achieve the code execution through a RemoteControl server.
https://twitter.com/wvuuuuuuuuuuuuu/status/1694956245742923939
https://forums.ivanti.com/s/article/Avalanche-Vulnerabilities-Addressed-in-6-4-1?language=en_US