Vulnerabilitycritical

Ivanti fixed a maximum severity flaw in its EPM software

Security Affairsby @securityaffairsSep 11, 2024 · 09:20 UTC (Sep 11, 2024)4 min read4 · 2 reads

Read at securityaffairs.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-29847 CVE-2024-32840 CVE-2024-32842 CVE-2024-32843 CVE-2024-32845 CVE-2024-32846 CVE-2024-32848 CVE-2024-34779 CVE-2024-34783 CVE-2024-34785 CVE-2024-37397 CVE-2024-8191 CVE-2024-8320 CVE-2024-8321 CVE-2024-8322 CVE-2024-8441

Tags: cve-2024-29847 cve-2024-32840 cve-2024-32842 cve-2024-32843 cve-2024-32845 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-29847 +10 related CVEs CVE-2024-37397 CVE-2024-32848 CVE-2024-34783 CVE-2024-32840 CVE-2024-34785 CVE-2024-32845 CVE-2024-34779 CVE-2024-32842 CVE-2024-32843 CVE-2024-32846	Unauthenticated Deserialization RCE in Ivanti Endpoint Manager Agent Portal	9.8 group max	53%		Sep 12, 2024
CVE-2024-8191 +4 related CVEs CVE-2024-8322 CVE-2024-8321 CVE-2024-8441 CVE-2024-8320	SQL Injection to RCE in Ivanti Endpoint Manager Management Console	9.8 group max	20%		Sep 10, 2024

From the original article

4 min read at securityaffairs.com

Ivanti fixed a maximum severity flaw in its Endpoint Management software (EPM) that can let attackers achieve remote code execution on the core server Ivanti Endpoint Management (EPM) software is a comprehensive solution designed to help organizations manage and secure their endpoint devices across various platforms, including Windows, macOS, Chrome OS, and IoT systems.

Security Affairs

By @securityaffairs · securityaffairs.com

Read the full article at Security Affairs

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.