CVE-2023-35077: High severity Ivanti Endpoint Manager vulnerability
Published Jul 21, 2023
·Updated
An out-of-bounds write vulnerability on windows operating systems causes the Ivanti AntiVirus Product to crash. Update to Ivanti AV Product version 7.9.1.285 or above.
Affected Software
4 affected components
Ivanti Endpoint Manager<7.9.1.285
Microsoft Windows
All of the following
Ivanti Endpoint Manager<7.9.1.285
Microsoft Windows
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti AntiVirusto a version that resolves this vulnerability.Fixed in 7.9.1.285
Event History
Jul 21, 2023
CVE Published
via MITRE·08:51 PM
Data Sourced
via MITRE·08:51 PM
DescriptionSeverity
Data Sourced
09:15 PM
Description
Data Sourced
via NVD·09:15 PM
DescriptionSeverityWeaknessAffected Software
Jan 14, 58462
Event
02:33 AM
Frequently Asked Questions
1
What is CVE-2023-35077?
CVE-2023-35077 is an out-of-bounds write vulnerability on Windows operating systems that causes the Ivanti AntiVirus Product to crash.
2
How does CVE-2023-35077 impact Ivanti AntiVirus Product?
CVE-2023-35077 can cause the Ivanti AntiVirus Product to crash.
3
What software is affected by CVE-2023-35077?
The Ivanti Endpoint Manager software with versions up to 7.9.1.285 is affected by CVE-2023-35077.
4
How severe is CVE-2023-35077?
CVE-2023-35077 has a severity rating of 7.5 (high).
5
How can I fix CVE-2023-35077?
To fix CVE-2023-35077, update your Ivanti AntiVirus Product to version 7.9.1.285 or above.