U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti EPMM Vulnerability

🗓️ 19 Jan 2024 04:55:00Reported by The Hacker NewsType

U.S. Cybersecurity Agency Warns of Actively Exploited Ivanti Endpoint Manager Mobile (EPMM) and MobileIron Core Vulnerability CVE-2023-35082. Impact includes unauthorized remote access to user information and server changes. Rapid7 reported that chaining with another CVE-2023-35081 permits web shell exploitation. Vendor fixes recommended by February 8, 2024. Two zero-day flaws in Ivanti Connect Secure VPN devices also under mass exploitation

Reporter	Title	Published	Views	Family All 212
zdt	Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit	22 Jan 202400:00	–	zdt
zdt	Ivanti Connect Secure Unauthenticated Remote Code Execution Exploit	21 Feb 202400:00	–	zdt
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	20 Jan 202419:15	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	16 Jan 202408:05	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile	29 Jul 202319:58	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	18 Jan 202413:25	–	githubexploit
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	3 Feb 202411:33	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Connect_Secure	14 Jan 202418:30	–	githubexploit
GithubExploit	Exploit for Command Injection in Ivanti Connect_Secure	14 Jan 202409:25	–	githubexploit
GithubExploit	Exploit for Improper Authentication in Ivanti Endpoint_Manager_Mobile	31 Jul 202318:21	–	githubexploit

20 Jan 2024 04:42Current

8.8High risk

Vulners AI Score8.8

CVSS 3.19.8

CVSS 310

EPSS0.99999