CVE-2024-13169

CVE-2024-13169 is an out-of-bounds read vulnerability affecting Ivanti Endpoint Manager (EPM) versions prior to the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. The issue stems from CWE-125 (out-of-bounds read) and CWE-843 (type confusion), enabling improper memory access. It carries a CVSS v3.1 base score of 7.8 (AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H), indicating high impact on confidentiality, integrity, and availability.

A local authenticated attacker with low privileges can exploit this vulnerability to escalate their privileges on the affected system. The attack requires local access and low attack complexity, with no user interaction needed, allowing the attacker to gain higher-level access and potentially execute arbitrary code or manipulate system resources.

Ivanti's security advisory recommends applying the January-2025 Security Updates for EPM 2024 and EPM 2022 SU6 to mitigate the vulnerability, as detailed at https://forums.ivanti.com/s/article/Security-Advisory-EPM-January-2025-for-EPM-2024-and-EPM-2022-SU6.