CVE-2023-28323: Critical severity ivanti endpoint manager (epm) vulnerability
A deserialization of untrusted data exists in EPM 2022 Su3 and all prior versions that allows an unauthenticated user to elevate rights. This exploit could potentially be used in conjunction with other OS (Operating System) vulnerabilities to escalate privileges on the machine or be used as a stepping stone to get to other network attached machines.
Affected Software
Event History
Frequently Asked Questions
What is CVE-2023-28323?
CVE-2023-28323 is a vulnerability in Ivanti Endpoint Manager that allows an unauthenticated user to elevate rights.
How severe is CVE-2023-28323?
CVE-2023-28323 has a severity rating of 9.8 (critical).
Which versions of Ivanti Endpoint Manager are affected by CVE-2023-28323?
CVE-2023-28323 affects Ivanti Endpoint Manager 2022 Su3 and all prior versions.
How can an unauthenticated user exploit CVE-2023-28323?
An unauthenticated user can exploit CVE-2023-28323 by deserializing untrusted data, which allows them to elevate rights.
Is there a fix available for CVE-2023-28323?
At the time of this writing, there is no official fix available for CVE-2023-28323. It is recommended to follow the guidance provided by Ivanti and apply any security patches or updates as soon as they are released.