VulnerabilitycriticalExploited in the wild

Ivanti EPMM and MobileIron Core vulnerability is actively exploited, CISA confirms (CVE-2023-35082)

Help Net Securityby @zeljkazorzJan 19, 2024 · 00:00 UTC (Jan 19, 2024)2 min read2

Read at helpnetsecurity.com

Analyze CVE-2023-35082 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2023-35082 CVE-2023-35078 CVE-2023-46805 CVE-2024-21887

Tags: cve-2023-35082 cve-2023-35078 cve-2023-46805 cve-2024-21887 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2023-35078	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) Exposes PII	9.8	100%	KEVRansomwarePoC	Jul 25, 2023 KEV Jul 25, 2023
CVE-2023-35082	Authentication Bypass in Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core	9.8	100%	KEVRansomware	Aug 15, 2023 KEV Jan 18, 2024
CVE-2024-21887 +1 related CVE CVE-2023-46805	Command Injection RCE in Ivanti Connect Secure and Policy Secure	9.1 group max	100%	KEVRansomwarePoC	Jan 12, 2024 KEV Jan 10, 2024

From the original article

2 min read at helpnetsecurity.com

A previously patched critical vulnerability ( CVE-2023-35082 ) affecting Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core is being actively exploited, the Cybersecurity and Infrastructure Security Agency (CISA) has confirmed by adding the vulnerability to its Known Exploited Vulnerabilities Catalog (KEV).

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.