Critical Ivanti flaw exploited despite available patches

Home / vulnerabilities / Critical Ivanti flaw exploited despite available patches

Critical Ivanti flaw exploited despite available patches

October 3, 2024 cyberelias 0 Comments 1 tag

CISA has added the vulnerability to its Known Exploited Vulnerability (KEV) Catalogue.

EPM raked with RCE flaws

The 2022 and prior releases of Ivanti’s EPM, available to customers under the label service update 5 (SU5), were marred with a clutch of critical RCE bugs, including CVE-2024-29824, all receiving a severity rating of CVSS 9.6 out of 10.

The solution, which allows organizations to manage, secure, and automate the maintenance of their devices, including desktops, laptops, servers, and mobile devices, within an IT environment, was reportedly affected by a flaw that allowed a string of malicious SQL queries to be executed on the underlying databases.

Tags: vulnerabilities

Explore More

GitHub fixes critical Enterprise Server bug granting admin privileges

Fixed two moderately rated bugs One of the other vulnerabilities fixed with the patch is CVE-2024-7711, which received a “medium” severity rating at a 5.3 CVSS score. The vulnerability is

EXECUTIVE SUMMARY: Remember last year’s MOVEit meltdown? Get ready for a reprise… For anyone who missed last year’s madness, MOVEit Transfer is a popular managed file transfer product sold by

Social Engineering – Techniken Social Engineering hat sich für Cyberkriminelle als besonders erfolgreich erwiesen, wenn es darum geht in Unternehmen einzudringen. Sobald ein Angreifer das Passwort eines vertrauenswürdigen Mitarbeiters erbeutet