PT-2021-24125 · Ivanti · Ivanti Endpoint Manager Cloud Service Appliance

Published 2021-08-12 · Updated 2025-12-03 · CVE-2021-44529

Positive Technologies (AI Summary)

CVSS v2.0

10

Critical

Base vector

AV:N/AC:L/Au:N/C:C/I:C/A:C

Name of the Vulnerable Software and Affected Versions: Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) (affected versions not specified)

Description: A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Code Injection

Weakness Enumeration

CWE-94

Related Identifiers

BDU:2025-10481

CVE-2021-44529

Affected Products

Ivanti Endpoint Manager Cloud Service Appliance

References · 46

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/linux/http/ivanti_csa_unauth_rce_cve_2021_44529.rb · Exploit
• 🔥 https://github.com/jax7sec/CVE-2021-44529 · Exploit
• 🔥 https://github.com/jkana/CVE-2021-44529 · Exploit
• 🔥 https://exploit-db.com/exploits/50833 · Exploit
• 🔥 http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html · Exploit
• 🔥 http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2021-44529 · Security Note
• https://forums.ivanti.com/s/article/SA-2021-12-02 · Vendor Advisory
• https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US · Security Note
• https://osv.dev/vulnerability/CVE-2021-44529 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-10481 · Security Note
• https://twitter.com/IT_securitynews/status/1760334839268471041 · Twitter Post
• https://twitter.com/binitamshah/status/1762738092279050390 · Twitter Post
• https://twitter.com/inthewildio/status/1773665214115749999 · Twitter Post
• https://t.me/cvenotify/114727 · Telegram Post