Lucene search
IvantiCVELIST:CVE-2024-8321HistorySep 10, 2024 - 8:54 p.m.
CVE-2024-8321
2024-09-1020:54:02
CWE-306
ivanti
www.cve.org
2
cve-2024-8321
missing authentication
network isolation
ivanti epm
remote unauthenticated attacker
managed devices
CVSS3
5.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
EPSS
0.001
Percentile
17.7%
Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.
CNA Affected
[
{
"defaultStatus": "affected",
"product": "Endpoint Manager",
"vendor": "Ivanti",
"versions": [
{
"status": "unaffected",
"version": "2022 SU6",
"versionType": "custom"
},
{
"status": "unaffected",
"version": "2024 September Security Update",
"versionType": "custom"
}
]
}
]Related
vulnrichment
vulnrichment
CVE-2024-8321
2024-09-10 20:54:02
cve
cve
CVE-2024-8321
2024-09-10 21:15:15
nvd
nvd
CVE-2024-8321
2024-09-10 21:15:15
nessus
nessus
Ivanti Endpoint Manager 2024 - September 2024 Security Update
2024-09-13 00:00:00
Ivanti Endpoint Manager 2022 - September Security Update
2024-09-18 00:00:00
CVSS3
5.8
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
NONE
Integrity Impact
NONE
Availability Impact
LOW
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:N/I:N/A:L
EPSS
0.001
Percentile
17.7%
Related for CVELIST:CVE-2024-8321