CVE-2024-29824: Ivanti Endpoint Manager (EPM) SQL Injection Vulnerability
An unspecified SQL Injection vulnerability in Core server of Ivanti EPM 2022 SU5 and prior allows an unauthenticated attacker within the same network to execute arbitrary code.
Other sources
Ivanti Endpoint Manager (EPM) contains a SQL injection vulnerability in Core server that allows an unauthenticated attacker within the same network to execute arbitrary code.
— CISA
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Compensating control
Discontinue use of Ivanti Endpoint Manager if vendor mitigations are unavailable (stop using the product until a vendor mitigation or fix is provided).
Event History
Frequently Asked Questions
What is the severity of CVE-2024-29824?
CVE-2024-29824 has been classified as a critical severity vulnerability due to its potential for unauthenticated remote code execution.
How do I fix CVE-2024-29824?
To fix CVE-2024-29824, upgrade Ivanti Endpoint Manager to a version later than 2022 SU5.
Who is affected by CVE-2024-29824?
CVE-2024-29824 affects Ivanti Endpoint Manager (EPM) version 2022 and prior, specifically those up to and including version 2022 SU5.
What type of vulnerability is CVE-2024-29824?
CVE-2024-29824 is an SQL Injection vulnerability that allows for arbitrary code execution within the same network.
Can CVE-2024-29824 be exploited remotely?
Yes, CVE-2024-29824 can be exploited by an unauthenticated attacker remotely if they are within the same network.