Ivanti recently addressed a critical remote code execution (RCE) vulnerability in its Endpoint Management software (EPM) that can let unauthenticated hackers hijack enrolled devices or the core server.
Ivanti EPM helps manage client devices running a wide range of platforms, from Windows and macOS to Chrome OS and IoT operating systems.
The security flaw (tracked as CVE-2023-39336) impacts all supported Ivanti EPM versions, and it has been fixed in version 2022 Service Update 5.
The hackers that has access to a target’s internal network can exploit the vulnerability in low-complexity attacks which does not require privileges or user interaction.
This can then allow the attacker control over machines running the EPM agent. When the core server is configured to use SQL express, this might lead to RCE on the core server.
The company says it has no evidence that its customers have been affected by attackers exploiting this vulnerability.
Now, Ivanti blocks public access to an advisory containing full CVE-2023-39336 details, which might provide customers with more time to secure their devices before threat actors can create exploits using the additional information.
Ivanti’s products are used by more than 40,000 companies globally to manage their IT assets and systems.
Comments