High severity7.8NVD Advisory· Published May 31, 2024· Updated Jun 17, 2026

CVE-2024-22058

Description

A buffer overflow allows a low privilege user on the local machine that has the EPM Agent installed to execute arbitrary code with elevated permissions in Ivanti EPM 2021.1 and older.

Affected products

Ivanti/Endpoint Manager2 versions
cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*+ 1 more
- cpe:2.3:a:ivanti:endpoint_manager:*:*:*:*:*:*:*:*range: <=2021.1
- (no CPE)range: <=2021.1
Ivanti/EPM Agentllm-create
Range: <=2021.1
Ivanti/EPMcpe-rescue
Range: 2021

Patches

Vulnerability mechanics

References

forums.ivanti.com/s/article/CVE-2024-22058-Privilege-Escalation-for-Ivanti-Endpoint-Manager-EPMnvdPermissions Required

News mentions

No linked articles in our index yet.

cvss	0.507
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000