CVE-2024-22058: 
Ivanti Endpoint Manager vulnerability analysis and mitigation

A buffer overflow vulnerability (CVE-2024-22058) has been identified in Ivanti EPM 2021.1 and older versions. The vulnerability affects systems with the EPM Agent installed and allows a low-privileged local user to execute arbitrary code with elevated permissions (NVD).

The vulnerability is classified as a buffer overflow issue that exists in the EPM Agent component. When successfully exploited, it enables privilege escalation from a low-privileged user context to elevated permissions. The vulnerability has been assigned a CVSS v3.0 base score of 7.8 (HIGH) with the following vector: CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H (NVD).

The successful exploitation of this vulnerability allows attackers to execute arbitrary code with elevated permissions, potentially leading to complete system compromise. The impact affects confidentiality, integrity, and availability of the system, as indicated by the CVSS scoring (NVD).

The vulnerability requires local access to the system and low privileges to exploit. The attack complexity is considered low, requiring no user interaction for successful exploitation (NVD).

Users running Ivanti EPM 2021.1 or older versions should upgrade to a patched version as recommended by Ivanti (Ivanti Forums).