Description (CNA)
An out-of-bounds write in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update allows a remote unauthenticated attacker to cause a denial of service.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Ivanti / Endpoint Manager | unaffected 2024 January-2025 Security Update; unaffected 2022 SU6 January-2025 Security Update |
CWE
CWE-787
References
- https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6
ADP enrichment
No English description supplied.
No references supplied.