Lucene search

K
nvd[email protected]NVD:CVE-2022-27773
HistoryDec 05, 2022 - 10:15 p.m.

CVE-2022-27773

2022-12-0522:15:10
web.nvd.nist.gov
6
ivanti epm
privilege escalation
vulnerability
command execution
elevated privileges

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

65.4%

A privilege escalation vulnerability is identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges.

Affected configurations

Nvd
Node
ivantiendpoint_managerRange<2021.1
OR
ivantiendpoint_managerMatch2021.1su1
OR
ivantiendpoint_managerMatch2021.1su2
OR
ivantiendpoint_managerMatch2022su1
VendorProductVersionCPE
ivantiendpoint_manager*cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*
ivantiendpoint_manager2021.1cpe:2.3:a:ivanti:endpoint_manager:2021.1:su1:*:*:*:*:*:*
ivantiendpoint_manager2021.1cpe:2.3:a:ivanti:endpoint_manager:2021.1:su2:*:*:*:*:*:*
ivantiendpoint_manager2022cpe:2.3:a:ivanti:endpoint_manager:2022:su1:*:*:*:*:*:*

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

0.003

Percentile

65.4%

Related for NVD:CVE-2022-27773