Vulnerabilities fixed in Ivanti Endpoint Manager

🗓️ 14 Jun 2024 09:37:49Reported by NCSCType

Ivanti Endpoint Manager fixes SQL Injection enabling local code execution; PoC exists for CVE-2024-29824.

Reporter	Title	Published	Views	Family All 141
0day.today	Ivanti EPM RecordGoodApp SQL Injection / Remote Code Execution Exploit	9 Jul 202400:00	–	zdt
GithubExploit	Exploit for SQL Injection in Ivanti Endpoint_Manager	12 Jun 202413:53	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	3 Apr 202018:47	–	githubexploit
ATTACKERKB	CVE-2024-29824	31 May 202400:00	–	attackerkb
BDU FSTEC	The vulnerability of the Ivanti EPM 2022 SU5 endpoint management software lies in its lack of measures to neutralize special elements used in the operating system’s command set. This allows a perpetrator to execute arbitrary code.	27 May 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GetDBPatchProducts function in the endpoint management software Ivanti EPM 2022 SU5 allows a hacker to execute arbitrary code.	3 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GetLogFileRulesNameUniqueSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a attacker to execute arbitrary code.	7 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GetLogFileRulesSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.	10 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GetDBPatches method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.	10 Jun 202400:00	–	bdu_fstec
BDU FSTEC	The vulnerability of the GetRulesetsSQL method in the Ivanti Endpoint Manager software for managing endpoints in information networks allows a hacker to execute arbitrary code.	10 Jun 202400:00	–	bdu_fstec