Ivanti Endpoint Manager Mobile Code Injection Vulnerability Leading to Unauthenticated Remote Code Execution

A code injection vulnerability has been identified in Ivanti Endpoint Manager Mobile (EPMM) versions 12.5.0.0 and prior, 12.6.0.0 and prior, and 12.7.0.0 and prior. This vulnerability allows attackers to execute code remotely without authentication.

Impact

Exploitation of this vulnerability allows for unauthenticated remote code execution on the affected system.

Remediation

Users can apply the Ivanti security update RPM 12.x.0.x or RPM 12.x.1.x, depending on their current version. Instructions for downloading and applying the patch are available on the Ivanti Support Portal. After applying the RPM, it is important to note that the patch does not survive a version upgrade, so the RPM will need to be reinstalled if an upgrade is performed.