Critical Ivanti flaw exploited despite available patches

Home / vulnerabilities / Critical Ivanti flaw exploited despite available patches

Critical Ivanti flaw exploited despite available patches

October 3, 2024 cyberelias 0 Comments 1 tag

CISA has added the vulnerability to its Known Exploited Vulnerability (KEV) Catalogue.

EPM raked with RCE flaws

The 2022 and prior releases of Ivanti’s EPM, available to customers under the label service update 5 (SU5), were marred with a clutch of critical RCE bugs, including CVE-2024-29824, all receiving a severity rating of CVSS 9.6 out of 10.

The solution, which allows organizations to manage, secure, and automate the maintenance of their devices, including desktops, laptops, servers, and mobile devices, within an IT environment, was reportedly affected by a flaw that allowed a string of malicious SQL queries to be executed on the underlying databases.

Tags: vulnerabilities

Explore More

A critical Nvidia Container Toolkit bug can allow a complete host takeover

The company added that, under certain circumstances, the successful exploitation of the vulnerability might allow code execution, denial of service, escalation of privileges, information disclosure, and data tampering. Time of

Fixed two moderately rated bugs One of the other vulnerabilities fixed with the patch is CVE-2024-7711, which received a “medium” severity rating at a 5.3 CVSS score. The vulnerability is

Social Engineering – Techniken Social Engineering hat sich für Cyberkriminelle als besonders erfolgreich erwiesen, wenn es darum geht in Unternehmen einzudringen. Sobald ein Angreifer das Passwort eines vertrauenswürdigen Mitarbeiters erbeutet