Exploit / PoCcritical

Chinese Hackers Exploit Ivanti EPMM Bugs in Global Enterprise Network Attacks

The Hacker Newsby @TheHackersNewsMay 22, 2025 · 12:07 UTC (May 22, 2025)2 min read2 · 2 reads

Read at thehackernews.com

Analyze CVE-2025-4427 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2025-4427 CVE-2025-4428 CVE-2025-31324

Tags: cve-2025-4427 cve-2025-4428 cve-2025-31324 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2025-31324	Unauthenticated File Upload RCE in SAP NetWeaver Visual Composer	9.8	99%	KEVRansomwarePoC	Apr 24, 2025 KEV Apr 29, 2025
CVE-2025-4428 +1 related CVE CVE-2025-4427	Authenticated Code Injection RCE in Ivanti Endpoint Manager Mobile (EPMM) API	8.8 group max	88%	KEV	May 13, 2025 KEV May 19, 2025

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  May 22, 2025 Enterprise Security / Malware A recently patched pair of security flaws affecting Ivanti Endpoint Manager Mobile (EPMM) software has been exploited by a China-nexus threat actor to target a wide range of sectors across Europe, North America, and the Asia-Pacific region. The vulnerabilities, tracked as CVE-2025-4427 (CVSS score: 5. 3) and CVE-2025-4428 (CVSS score: 7.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.