Description

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.

Related CPE's

a

ivanti

endpoint_manager

9

References

https://forums.ivanti.com/s/article/Security-Advisory-EPM-April-2025-for-EPM-2024-and-EPM-2022-SU6

Vendor Advisory

Weaknesses

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Secondary
CWE-822

[email protected]

Primary
NVD-CWE-Other

CVSS impact metrics

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H

6.1 · Medium

Information

Source identifier

3c1d8aa1-5a33-4ea4-8992-aadd6440af75

Vulnerability status

Analyzed

Published

2025-04-08T13:15:49.310Z

11 months ago

Last modified

2025-05-16T12:00:22.290Z

10 months ago