H3XAOperational intelligence
Live analytical pictureEvidence before assessment
TypeVulnerability
External ID—
First seen2024-03-25
Last seen2024-03-25

Confidence

—

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

Labels

exploitedkevransomware

CISA KEV context

Vendor / productIvanti Endpoint Manager Cloud Service Appliance (EPM CSA)
Added2024-03-25
Due date2024-04-15
4 recorded

Relationships

mitigatesMitigation
related-toTechnique
2 external

References

nvd
CVE-2021-44529
open
cwe
CWE-94
open