CVE-2024-13171

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...

CVE-2024-13171

creationtimestamp| type| source ---|---|--- 2025-01-14 17:51:41+00:00| seen| https://infosec.exchange/users/cve/statuses/113827977672601993 2025-01-14 18:16:33+00:00| seen| https://bsky.app/profile/cve-notifications.bsky.social/post/3lfpubsqiua2t 2025-01-24 05:03:27+00:00| seen|...

CVE-2024-13171

Ivanti Endpoint Manager (EPM) is affected by CVE-2024-13171 due to insufficient filename validation, enabling remote code execution. A remote unauthenticated attacker can exploit this, with local user interaction required for the exploit as described. Public advisories indicate fixed releases are...

CVE-2024-13171

Insufficient filename validation in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to achieve remote code execution. Local user interaction is required...