Remote Unauthorized Access to Network Isolation in Ivanti EPM Before 2022 SU6 or 2024 September Update

CVE-2024-8320

What is CVE-2024-8320?

The vulnerability involves a significant missing authentication flaw within the network isolation of Ivanti Endpoint Manager products. This issue permits a remote unauthenticated attacker to exploit the vulnerabilities, enabling them to spoof the network isolation status of managed devices. As a result, attackers can potentially manipulate device visibility and network policies without any authentication, posing a serious risk to the integrity and security of the managed network. Organizations using affected versions of Ivanti EPM should prioritize reviewing security measures and apply the latest updates to mitigate potential risks.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References