PT-2023-21649 · Ivanti · Ivanti Endpoint Manager

Published 2023-06-30 · Updated 2024-10-21 · CVE-2023-28324

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions 2022 and below

Description A improper input validation vulnerability exists that could allow privilege escalation or remote code execution.

Recommendations For Ivanti Endpoint Manager versions 2022 and below, at the moment, there is no information about a newer version that contains a fix for this vulnerability.

Exploit

RCE

Weakness Enumeration

CWE-20

Related Identifiers

CVE-2023-28324

Affected Products

Ivanti Endpoint Manager

References · 13

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/exploits/windows/misc/ivanti_agent_portal_cmdexec.rb · Exploit
• 🔥 https://github.com/horizon3ai/CVE-2023-28324 · Exploit
• https://osv.dev/vulnerability/CVE-2023-28324 · Vendor Advisory
• https://forums.ivanti.com/s/article/SA-2023-06-06-CVE-2023-28324 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-28324 · Security Note
• https://t.me/cvenotify/53489 · Telegram Post
• https://twitter.com/buaqbot/status/1835765792295518450 · Twitter Post
• https://twitter.com/hacks_zach/status/1835698396436324808 · Twitter Post
• https://t.me/cibsecurity/65845 · Telegram Post
• https://twitter.com/reverseame/status/1848236804475859444 · Twitter Post
• https://twitter.com/actae0n/status/1834764067556499821 · Twitter Post
• https://t.me/cvenotify/95943 · Telegram Post
• https://t.me/true_secator/6220 · Telegram Post