Lucene search

K
hiveproHiveForce LabsHIVEPRO:B75F087EFAC214AC9503334BF8ECF522
HistoryAug 03, 2023 - 6:01 a.m.

Ivanti Addressed Second Zero-Day Flaw Exploited by Attackers

2023-08-0306:01:53
HiveForce Labs
www.hivepro.com
31
ivanti
zero-day
flaw
vulnerability
admin-authenticated
attackers
arbitrary files
unauthorized access
os command execution
web shell deployment
urgent patching
data compromise
hiveforce labs
threat advisories

0.703 High

EPSS

Percentile

98.0%

Threat Level Vulnerability Report For a detailed threat advisory, download the pdf file here Summary The zero-day vulnerability (CVE-2023-35081) in Ivanti EPMM enables admin-authenticated attackers to write arbitrary files, risking unauthorized access, OS command execution, and malicious web shell deployment. Urgent patching is crucial to prevent widespread impact and data compromise. To receive real-time threat advisories, please follow HiveForce Labs on LinkedIn.

0.703 High

EPSS

Percentile

98.0%