Ivanti Endpoint Manager Improper Control of Dynamically Managed Code Resources Vulnerability Allowing Arbitrary File Write and Potential Remote Code Execution

A vulnerability in Ivanti Endpoint Manager (EPM) prior to version 2024 SU4 SR1 allows remote, unauthenticated attackers to write arbitrary files on the server, potentially leading to remote code execution. This issue arises from improper control of dynamically managed code resources. Exploitation of this vulnerability requires user interaction and connecting to an untrusted core server.

Impact

Successful exploitation allows for arbitrary file writing on the server, with the potential for remote code execution.

Remediation

Users can upgrade to Ivanti Endpoint Manager 2024 SU4 SR1, available through the Ivanti License System. This update applies to EPM 2024 SU4 core consoles and remote consoles.