CVE-2024-29824 is a critical SQL Injection vulnerability affecting Ivanti EPM 2022 SU5 and prior, allowing unauthenticated attackers on the same network to execute arbitrary code on the Core server. With a CVSS score of 8.8 (HIGH), this flaw presents a severe risk due to its low attack complexity, requiring no user interaction, and leading to complete compromise of confidentiality, integrity, and availability. The vulnerability is actively exploited in the wild, as confirmed by its presence in the KEV catalog and public exploit modules for Metasploit and Nuclei. This has garnered significant community attention and media coverage, highlighting the urgency for patching.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 2022CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2022:-:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2022:su2:*:*:*:*:*:* | ||
2022CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager:2022:su3:*:*:*:*:*:* |
CVSS version used by this source: 3.0
CVSS:3.0/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.2 GitHub mentions.
The average CVE in this peer group has 0.2 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.