Critical WID-SEC-2024-2109 16 CVEs

Ivanti Endpoint Manager: Mehrere Schwachstellen

Published Sep 10, 2024 · Updated Sep 16, 2024 · Revision 2 · de-DE

Vendor: ivanti Product: Endpoint Manager Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen, Sicherheitsmaßnahmen zu umgehen, erweiterte Rechte zu erlangen und vertrauliche Informationen preiszugeben.

Product

Ivanti Endpoint Manager ist eine Endpoint Management Software zur zentralen Verwaltung von Benutzerprofilen und -Geräten.

Vulnerabilities 16

Critical 10.0

CVE-2024-29847 Public exploit EPSS 52%

Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allow…

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32840 EPSS 25%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32842

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32843

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32845 EPSS 24%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32846

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-32848 EPSS 43%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-34779 EPSS 24%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-34783 EPSS 43%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
Critical 9.1

CVE-2024-34785 EPSS 25%

An unspecified SQL injection in Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote authenticated …

ivanti EPM Network devices

Sep 12, 2024
High 8.2

CVE-2024-37397 EPSS 59%

An External XML Entity (XXE) vulnerability in the provisioning web service of Ivanti EPM before 2022 SU6, or the 2024 S…

ivanti EPM Network devices

Sep 12, 2024
High 7.8

CVE-2024-8191 EPSS 20%

SQL injection in the management console of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote una…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 6.7

CVE-2024-8441

An uncontrolled search path in the agent of Ivanti EPM before 2022 SU6, or the 2024 September update allows a local aut…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 5.8

CVE-2024-8321

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 5.3

CVE-2024-8320

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote…

ivanti Endpoint Manager Network devices

Sep 10, 2024
Medium 4.3

CVE-2024-8322

Weak authentication in Patch Management of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote aut…

ivanti Endpoint Manager Network devices

Sep 10, 2024

Revision history

2024-09-16 #2
Exploit aufgenommen
2024-09-10 #1
Initiale Fassung

References

Ivanti Security Advisory EPM September 2024 vom 2024-09-10
https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022?language=en_US
Exploit im Summoning Team Blog
https://summoning.team/blog/ivanti-epm-cve-2024-29847-deserialization-rce/