Unauthenticated SQL Injection & RCE in Ivanti EPM 2022 SU5 and prior, allowing attackers to gain full control over the EPM host.
This vulnerability has been actively exploited in the wild, so we strongly recommend patching as soon as possible.
If exploited, an attacker could use the compromised Ivanti EPM host to move laterally across the network, potentially targeting other infrastructure.
For detailed information and patch instructions, refer to the advisory available here
Data from CISA
Actively exploited CVE : CVE-2024-29824
@transilienceai
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Critical Ivanti Endpoint Manager flaw exploited (CVE-2024-29824) | #HelpNetSecurity #CyberSecurity https://t.co/82QCNfzf8k
@hasdid
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
0 Replies
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
Nov 5, 2024 11:38 PM
7 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
Nov 4, 2024 12:00 AM
8 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
Oct 29, 2024 11:35 PM
9 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
Oct 23, 2024 1:17 AM
14 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
Actively exploited CVE : CVE-2024-29824
@transilienceai
Oct 20, 2024 1:13 AM
12 Impressions
0 Retweets
0 Likes
0 Bookmarks
1 Reply
0 Quotes
[
{
"nodes": [
{
"negate": false,
"cpeMatch": [
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "B1F6549B-CF5D-4607-B67D-5489905A1705",
"versionEndExcluding": "2022"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "46580865-5177-4E55-BDAC-73DA4B472B35"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E57E12B5-B789-450C-9476-6C4C151E6993"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "E47C65B3-56DD-4D65-8B4B-6AFFE28E94F2"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "10D6EAB7-B14B-45E9-92B9-4FADFBBB08AF"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su4:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "1877FB55-76BA-4714-ABB8-47258132F537"
},
{
"criteria": "cpe:2.3:a:ivanti:endpoint_manager:2022:su5:*:*:*:*:*:*",
"vulnerable": true,
"matchCriteriaId": "4F9E8D45-5F12-4D45-A74E-C314FA3618A3"
}
],
"operator": "OR"
}
]
}
]