CVE-2025-13662: High severity Ivanti Endpoint Manager vulnerability
Improper verification of cryptographic signatures in the patch management component of Ivanti Endpoint Manager prior to version 2024 SU4 SR1 allows a remote unauthenticated attacker to execute arbitrary code. User Interaction is required.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
Ivanti Endpoint Managerto a version that resolves this vulnerability.Fixed in 2024 SU4 SR1
Event History
Frequently Asked Questions
What is the severity of CVE-2025-13662?
CVE-2025-13662 is classified as a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2025-13662?
To fix CVE-2025-13662, update your Ivanti Endpoint Manager to version 2024 SU4 SR1 or later.
What are the potential impacts of exploiting CVE-2025-13662?
Exploiting CVE-2025-13662 could allow an attacker to execute arbitrary code on the affected system.
Is user interaction required to exploit CVE-2025-13662?
Yes, user interaction is required to exploit CVE-2025-13662.
Which versions of Ivanti Endpoint Manager are affected by CVE-2025-13662?
Ivanti Endpoint Manager versions prior to 2024 SU4 SR1 are affected by CVE-2025-13662.