The version of Ivanti Endpoint Manager 2024 running on the remote host lacking the January 2024 Hotfix. It is, therefore, affected by mutliple vulnerabilities: 

  - Absolute path traversal in Ivanti Endpoint Manager before 2024 January Security Update or 2022 SU6 November     Security Update allows a remote unauthenticated attacker to achieve code execution. User interaction     is not required. (CVE-2024-10811, CVE-2024-13159, CVE-2024-13160, CVE-2024-13161)

  - Improper Validation and Deserialization of untrusted data in Ivanti Endpoint Manager before 2024     November Security Update or 2022 SU6 November Security Update allows a remote unauthenticated attacker     to achieve remote code execution. User interaction is required.     (CVE-2024-13163, CVE-2024-13170, CVE-2024-13171)   
  - An out-of-bounds read in Ivanti Endpoint Manager before 2024 November Security Update or 2022 SU6 November     Security Update allows allows a local authenticated attacker to escalate their privileges.      (CVE-2024-13169)

Note that Nessus has not tested for these issues but has instead relied only on the service's self-reported version number of the affected dll files.

Detections

Analytics

Ivanti Endpoint Manager 2024 - January 2025 Security Update

high Nessus Plugin ID 214342

Version 1.4