CVE-2024-9380 is an OS command injection vulnerability in the admin web console of Ivanti CSA before version 5.0.2, affecting Ivanti Endpoint Manager Cloud Services Appliance. This high-severity vulnerability (CVSS 7.2) allows a remote authenticated attacker with admin privileges to achieve remote code execution. It is actively exploited in the wild, as confirmed by its presence in CISA's KEV catalog, and has garnered significant community discussion and media coverage. Despite active exploitation, no public exploit code is currently available on platforms like Metasploit or ExploitDB.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 5.0.2CPE matchmatch criteria | cpe:2.3:a:ivanti:endpoint_manager_cloud_services_appliance:*:*:*:*:*:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.1 Bluesky, 0.1 Mastodon, and 0.3 GitHub mentions.
The average CVE in this peer group has 0.1 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.