CVE-2024-8321
First published: Tue Sep 10 2024(Updated: )
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.
Credit: 3c1d8aa1-5a33-4ea4-8992-aadd6440af75
| Affected Software | Affected Version | How to fix |
|---|---|---|
| Ivanti Endpoint Manager (EPM) | <2022 | |
| Ivanti Endpoint Manager (EPM) | =2022 | |
| Ivanti Endpoint Manager (EPM) | =2022-su1 | |
| Ivanti Endpoint Manager (EPM) | =2022-su2 | |
| Ivanti Endpoint Manager (EPM) | =2022-su3 | |
| Ivanti Endpoint Manager (EPM) | =2022-su4 | |
| Ivanti Endpoint Manager (EPM) | =2022-su5 | |
| Ivanti Endpoint Manager (EPM) | =2024 |
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the severity of CVE-2024-8321?
CVE-2024-8321 is considered a critical vulnerability due to its potential to allow remote unauthenticated attackers to isolate managed devices from the network.
How do I fix CVE-2024-8321?
To fix CVE-2024-8321, update to the latest version of Ivanti Endpoint Manager that addresses this vulnerability, specifically any version released after the 2024 September update.
What versions of Ivanti Endpoint Manager are affected by CVE-2024-8321?
CVE-2024-8321 affects all versions of Ivanti Endpoint Manager prior to 2022 SU6 and the 2024 September update.
What impact does CVE-2024-8321 have on managed devices?
CVE-2024-8321 allows an unauthenticated attacker to isolate managed devices from the network, potentially disrupting operations.
Is authentication required for exploiting CVE-2024-8321?
No, CVE-2024-8321 can be exploited without any form of authentication.
- agent/weakness
- agent/references
- agent/type
- agent/first-publish-date
- agent/description
- agent/author
- agent/event
- agent/severity
- agent/last-modified-date
- agent/softwarecombine
- collector/mitre-cve
- source/MITRE
- collector/epss-latest
- source/FIRST
- agent/epss
- agent/source
- agent/tags
- collector/nvd-api
- source/NVD
- agent/software-canonical-lookup
- agent/software-canonical-lookup-request
- vendor/ivanti
- canonical/ivanti endpoint manager (epm)
- version/ivanti endpoint manager (epm)/2022
- version/ivanti endpoint manager (epm)/2022-su1
- version/ivanti endpoint manager (epm)/2022-su2
- version/ivanti endpoint manager (epm)/2022-su3
- version/ivanti endpoint manager (epm)/2022-su4
- version/ivanti endpoint manager (epm)/2022-su5
- version/ivanti endpoint manager (epm)/2024