[critical] Ivanti Endpoint Manager (EPM) SQL Injection

Wed, 02 Oct 2024 00:00:00 GMT

Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code. Added to the CISA KEV catalog on 2024-10-02.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2024-10-02: CISA added CVE-2024-29824 to the KEV catalog (federal deadline 2024-10-23) (source)
2024-05-31: CVE-2024-29824 published (source)

CVEs: CVE-2024-29824

[critical] Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection

Mon, 25 Mar 2024 00:00:00 GMT

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody). Added to the CISA KEV catalog on 2024-03-25. CISA lists known use in ransomware campaigns. CVE-2021-44529 was assigned before 2024; the KEV listing came in 2024.

Status: closed · Patch: patched · Fixed in: See vendor advisory linked in sources

Latest updates:

2024-03-25: CISA added CVE-2021-44529 to the KEV catalog (federal deadline 2024-04-15) (source)

CVEs: CVE-2021-44529

pwn.watch: Ivanti EPM incident updates

[critical] Ivanti Endpoint Manager (EPM) SQL Injection

[critical] Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection