CVE-2024-29847: Critical severity ivanti endpoint manager (epm) vulnerability
Published Sep 12, 2024
·Updated
Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution.
Affected Software
8 affected components
Ivanti Endpoint Manager<2022
Ivanti Endpoint Manager=2022
Ivanti Endpoint Manager=2022-su1
Ivanti Endpoint Manager=2022-su2
Ivanti Endpoint Manager=2022-su3
Ivanti Endpoint Manager=2022-su4
Ivanti Endpoint Manager=2022-su5
Ivanti Endpoint Manager=2024
Event History
Sep 10, 2024
News Published
via BleepingComputer·07:28 PM
News Published
via BleepingComputer·07:30 PM
Sep 12, 2024
CVE Published
via MITRE·01:09 AM
Data Sourced
via MITRE·01:09 AM
DescriptionSeverity
Sep 16, 2024
News Published
via BleepingComputer·07:08 PM
Frequently Asked Questions
1
What is the severity of CVE-2024-29847?
CVE-2024-29847 is considered a maximum severity vulnerability that allows remote unauthenticated attackers to execute code remotely.
2
How do I fix CVE-2024-29847?
To fix CVE-2024-29847, update Ivanti Endpoint Manager to version 2022 SU6 or the September 2024 update.
3
What types of attacks can CVE-2024-29847 facilitate?
CVE-2024-29847 can facilitate remote code execution attacks due to deserialization of untrusted data.
4
Which versions of Ivanti Endpoint Manager are affected by CVE-2024-29847?
CVE-2024-29847 affects Ivanti Endpoint Manager versions prior to 2022 SU6 and the 2024 September update.
5
Is CVE-2024-29847 exploitable without authentication?
Yes, CVE-2024-29847 can be exploited by remote unauthenticated attackers.