CVE-2024-13170

Summary

CVE-2024-13170 is a newly disclosed vulnerability affecting Ivanti Endpoint Manager (EPM) versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. This issue enables an out-of-bounds write, granting a remote, unauthenticated attacker the ability to trigger a denial of service. By exploiting this vulnerability, malicious actors can cause the affected system to crash or become unresponsive, leading to disruptions in service and potential data loss. Organizations using Ivanti EPM are advised to apply the security updates as soon as possible to mitigate this risk.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.