WID-SEC-W-2024-0013

DeutschShown in its original language — a full translation is planned for a future version.

Ivanti Endpoint Manager: Schwachstelle ermöglicht Codeausführung

view advisory published 2024-01-04

Ein Angreifer aus dem lokalen Netzwerk kann eine Schwachstelle in Ivanti Endpoint Manager ausnutzen, um beliebigen Programmcode auszuführen und die Kontrolle über verwaltete Geräte übernehmen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-39336US	high8.8	9.97% (96th)	—	2024-01-09
An unspecified SQL Injection vulnerability in Ivanti Endpoint Manager released prior to 2022 SU 5 allows an attacker with access to the internal network to execute arbitrary SQL q…

references

External citations — patches, advisories, analysis.

Ivanti Security Advisory SA-2023-12-19-CVE-2023-39336 vom 2024-01-04external
WID-SEC-W-2024-0013 - CSAF Versionself
WID-SEC-2024-0013 - Portal Versionself

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan