Ivanti Releases Urgent Security Updates for Endpoint Manager Vulnerabilities
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2024-29847 | Unauthenticated Deserialization RCE in Ivanti Endpoint Manager Agent Portal | 9.8 group max | 53% | ||
| CVE-2024-6342 | **UNSUPPORTED WHEN ASSIGNED** A command injection vulnerability in the export-cgi program of Zyxel NAS326 firmware versions through V5.21(AAZF.18)C0 and NAS542… | 9.8 | 2% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Sep 11, 2024 Enterprise Security / Vulnerability Ivanti has released software updates to address multiple security flaws impacting Endpoint Manager (EPM), including 10 critical vulnerabilities that could result in remote code execution. CVE-2024-29847 (CVSS score: 10. 0) - A deserialization of untrusted data vulnerability that allows a remote unauthenticated attacker to achieve code execution.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.