9.8
Critical
Exploited
· ransomware
CVE-2021-44529 Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
Active exploitation observed
· CISA KEV catalogue
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Ransomware campaigns
Known to be used
Weakness
CWE-94
Description
A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Ivanti EPM | 4.6.0-512 | No fix stated |
| endpoint_manager_cloud_services_appliance | Versions not published |
References
- forums.ivanti.com forums.ivanti.com
- packetstormsecurity.com packetstormsecurity.com
- packetstormsecurity.com packetstormsecurity.com
Timeline
- Published
- Added to the KEV catalogue
- Last modified