Executive Risk Summary
"A remote authenticated attacker with admin privileges can achieve remote code execution due to an unbounded resource search path in Ivanti EPM before the 2024 January-2025 Security Update and 2022 SU6 January-2025 Security Update. This vulnerability poses a significant risk to the security and integrity of the affected systems, allowing attackers to execute arbitrary code and potentially gain control over the system."
Operational Audit Arsenal
Target Type Software Component
Target Asset Ivanti EPM Core
Standard Path %programfiles%IvantiEPM
PowerShell
# 🛠️ Senior Engineer Universal Audit
# Target: Ivanti EPM Core (Software Component)
$Targets = 'Ivanti EPM Core'
$SearchPaths = @("$env:windir\System32", "$env:ProgramFiles", "${env:ProgramFiles(x86)}")
Get-ChildItem -Path $SearchPaths -Include $Targets -Recurse -ErrorAction SilentlyContinue |
Select-Object FullName, @{Name="Version";Expression={$_.VersionInfo.ProductVersion}}Patch Impact Forecast
Reboot Required Likely
Moderate
Internal Work Notes
Apply Ivanti EPM January-2025 Security Update or 2022 SU6 January-2025 Security Update to mitigate remote code execution vulnerability (CVE-2024-13158)
Technical Intelligence & Operational Utilities • Delivered Weekly
Intelligence Sources
Related Ivanti Threats
Data compiled from NVD, MSRC, and CISA KEV Catalog. Intelligence synthesized via AI. Scripts provided for diagnostic purposes under MIT License.