CVE-2024-13164

Summary

CVE-2024-13164 is a newly disclosed vulnerability affecting Ivanti Endpoint Manager (EPM) versions before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. This issue stems from an uninitialized resource, which can be exploited by a local, authenticated attacker to escalate their privileges. By leveraging this vulnerability, an attacker could potentially gain elevated access to the system, putting sensitive business information at risk. Ivanti strongly recommends installing the latest security updates as soon as possible to mitigate this threat.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.