CVE-2022-27773: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

A privilege escalation vulnerability (CVE-2022-27773) was identified in Ivanti EPM (LANDesk Management Suite) that allows a user to execute commands with elevated privileges. The vulnerability affects Ivanti Endpoint Manager versions up to (excluding) 2021.1, version 2021.1 SU1, 2021.1 SU2, and 2022 SU1 (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 9.8 (CRITICAL) with the following vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H. This indicates that the vulnerability can be exploited over the network, requires low attack complexity, needs no privileges or user interaction, and can result in high impacts to confidentiality, integrity, and availability (NVD).

If exploited, this vulnerability allows attackers to execute commands with elevated privileges, potentially leading to complete system compromise. The high CVSS score indicates severe potential impacts on system confidentiality, integrity, and availability (NVD).

The vulnerability is considered highly exploitable due to its network attack vector and low attack complexity. No special privileges or user interaction are required to exploit this vulnerability (NVD).

Organizations using affected versions of Ivanti EPM should upgrade to a patched version as specified in the vendor's security advisory (Vendor Advisory).