Critical Ivanti flaw exploited despite available patches

Home / vulnerabilities / Critical Ivanti flaw exploited despite available patches

Critical Ivanti flaw exploited despite available patches

October 3, 2024 cyberelias 0 Comments 1 tag

CISA has added the vulnerability to its Known Exploited Vulnerability (KEV) Catalogue.

EPM raked with RCE flaws

The 2022 and prior releases of Ivanti’s EPM, available to customers under the label service update 5 (SU5), were marred with a clutch of critical RCE bugs, including CVE-2024-29824, all receiving a severity rating of CVSS 9.6 out of 10.

The solution, which allows organizations to manage, secure, and automate the maintenance of their devices, including desktops, laptops, servers, and mobile devices, within an IT environment, was reportedly affected by a flaw that allowed a string of malicious SQL queries to be executed on the underlying databases.

Discover more from Cyber Elias Academy

Subscribe to get the latest posts sent to your email.

Tags: vulnerabilities

Explore More

Was ist Social Engineering?

Social Engineering – TechnikenSocial Engineering hat sich für Cyberkriminelle als besonders erfolgreich erwiesen, wenn es darum geht in Unternehmen einzudringen. Sobald ein Angreifer das Passwort eines vertrauenswürdigen Mitarbeiters erbeutet hat,

The company added that, under certain circumstances, the successful exploitation of the vulnerability might allow code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Time of

In January, after a series of attacks that exploited zero-day vulnerabilities in Ivanti Connect Secure and Ivanti Policy Secure, CISA took the unusual step of ordering all federal agencies to