Conversation
New assessment for topic: CVE-2024-29847

Topic description: "Deserialization of untrusted data in the agent portal of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to achieve remote code execution. ..."

"CVE-2024-29847 is an unauthenticated deserialization of untrusted data [remote code execution vulnerability](https://forums.ivanti.com/s/article/Security-Advisory-EPM-September-2024-for-EPM-2024-and-EPM-2022?language=en_US) in Ivanti Endpoint Manager ("EPM") ..."

Link: https://attackerkb.com/assessments/883eb621-851a-4454-90ac-9643eef0016b
0
0
0