PT-2024-6215 · Ivanti · Ivanti Epm

Published 2024-08-29 · Updated 2024-09-12 · CVE-2024-8321

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions Ivanti EPM versions prior to 2022 SU6 Ivanti EPM versions prior to the 2024 September update

Description The issue is related to missing authentication in the Network Isolation feature of Ivanti EPM, allowing a remote unauthenticated attacker to isolate managed devices from the network. This can lead to a denial of service.

Recommendations For versions prior to 2022 SU6, update to 2022 SU6 or later to resolve the issue. For versions prior to the 2024 September update, apply the 2024 September update to fix the problem. As a temporary workaround, consider restricting access to the Network Isolation feature until a patch is available.

Fix

Missing Authentication

Weakness Enumeration

CWE-306

Related Identifiers

BDU:2024-07156

CVE-2024-8321

Affected Products

Ivanti Epm

References · 10

• https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-8321 · Security Note
• https://cve.org/CVERecord?id=CVE-2024-8321 · Security Note
• https://osv.dev/vulnerability/CVE-2024-8321 · Vendor Advisory
• https://bdu.fstec.ru/vul/2024-07156 · Security Note
• https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022?language=en_US · Note
• https://vuldb.com/?id.277097 · Note
• https://t.me/cvedetector/5302 · Telegram Post
• https://twitter.com/CVEnew/status/1833615165373169896 · Twitter Post
• https://t.me/cvenotify/94456 · Telegram Post