CVE-2021-44529

CRITICALCVSS 9.8Known Exploited

CISA Known Exploited Vulnerability

https://forums.ivanti.com/s/article/SA-2021-12-02?language=en_US; https://nvd.nist.gov/vuln/detail/CVE-2021-44529

Remediation deadline: April 15, 2024

Ransomware use: Known

Description

Ivanti Endpoint Manager Cloud Service Appliance (EPM CSA) contains a code injection vulnerability that allows an unauthenticated user to execute malicious code with limited permissions (nobody).

Timeline

Published:December 8th, 2021 10:15 PM

Last modified:August 4th, 2026 5:16 AM

Added to KEV:March 25th, 2024

CVSS Scoring

CVSS v3: 9.8 (CRITICAL)

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CVSS v2: 7.5

Affected Software

From NVD CPE configuration data

Vendors

ivanti

Products

endpoint_manager_cloud_services_appliance

Weaknesses (CWE)

CWE-94

References & Reports

Advisories, patches, and third-party reports

http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.htmlExploit
http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.htmlExploit
https://forums.ivanti.com/s/article/SA-2021-12-02Mitigation
http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.htmlExploit
http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.htmlExploit
https://forums.ivanti.com/s/article/SA-2021-12-02Mitigation
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-44529US Government Resource

Source: NIST NVD · Data may lag official sources by up to one minute