CVE-2021-44529
KEV · RansomwareIvanti Endpoint Manager Cloud Service Appliance (EPM CSA) Code Injection Vulnerability
View CVE record →- Vendor / Project
- Ivanti
- Product
- Endpoint Manager Cloud Service Appliance (EPM CSA)
- Date added
- Mar 25, 2024
- Due date
- Apr 15, 2024
- Known ransomware use
- Known
- CWEs
- CWE-94
Description
Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).
Required action
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.