Ivanti Endpoint Manager Remote Code Execution Vulnerability

A remote code execution vulnerability has been identified in Ivanti Endpoint Manager (EPM) versions 2022 SU8 Security Update 1 and prior, as well as in EPM 2024 SU3 and prior. The vulnerability arises from insufficient filename validation, which allows remote unauthenticated attackers to execute code. Exploitation of this vulnerability requires user interaction.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can upgrade to Ivanti Endpoint Manager 2024 SU3 Security Release 1 or Ivanti Endpoint Manager 2022 SU8 Security Release 2. Both versions are available for download in the Ivanti License System (ILS).