by Kastro
Paper/Archive/CVE-2024-29824

CVE-2024-29824

Ivanti EPM — Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability

KEV · due 23 OctEPSS 100%public exploitSSVC actCVSS 9.6
critical.is priorityof 100
99
CVSS 9.6 (CNA)9.6 / 10 × 3028.8In CISA KEV+3030.0EPSS percentile 100.01.000 × 2020.0Exploit: SSVC active+1010.0SSVC exploitation: active+1010.0
Description · from the CVE record

An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.

Affected

ProductAffectedFixed inSource
EPM2022 SU5 – 2022 SU5–CNA
endpoint_manager≤ 2022_su5–CISA-ADP

Scores by source

hackerone (CNA)9.6CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: active · Automatable: yes · Technical impact: total

References

refforums.ivanti.com/s/article/Security-Advisory-May-2024refcisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-29824kevcisa.gov/known-exploited-vulnerabilities-catalog