Desktop\&server Management
by Ivanti
CVEs (7)
| CVE | Vendor / Product | Sev | Risk | CVSS | EPSS | KEV | Published | Description |
|---|---|---|---|---|---|---|---|---|
| CVE-2020-12441 | Cri | 0.64 | 9.8 | 0.04 | Aug 6, 2020 | Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet. | ||
| CVE-2026-3483 | Hig | 0.51 | 7.8 | 0.00 | Mar 10, 2026 | An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges. | ||
| CVE-2024-29821 | Hig | 0.51 | 7.8 | 0.00 | Oct 18, 2024 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. | ||
| CVE-2024-29213 | Hig | 0.51 | 7.8 | 0.00 | Oct 18, 2024 | Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector. | ||
| CVE-2023-28129 | Hig | 0.51 | 7.8 | 0.00 | Aug 10, 2023 | DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user. | ||
| CVE-2024-7572 | Hig | 0.46 | 7.1 | 0.00 | Dec 10, 2024 | Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files. | ||
| CVE-2024-38648 | Med | 0.37 | 5.7 | 0.01 | Jul 12, 2025 | A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials. |
- risk 0.64cvss 9.8epss 0.04
Denial-of-Service (DoS) in Ivanti Service Manager HEAT Remote Control 7.4 due to a buffer overflow in the protocol parser of the ‘HEATRemoteService’ agent. The DoS can be triggered by sending a specially crafted network packet.
- risk 0.51cvss 7.8epss 0.00
An exposed dangerous method in Ivanti DSM before version 2026.1.1 allows a local authenticated attacker to escalate their privileges.
- risk 0.51cvss 7.8epss 0.00
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
- risk 0.51cvss 7.8epss 0.00
Ivanti DSM < version 2024.2 allows authenticated users on the local machine to run code with elevated privileges due to insecure ACL via unspecified attack vector.
- risk 0.51cvss 7.8epss 0.00
DSM 2022.2 SU2 and all prior versions allows a local low privileged account to execute arbitrary OS commands as the DSM software installation user.
- risk 0.46cvss 7.1epss 0.00
Insufficient permissions in Ivanti DSM before version 2024.3.5740 allows a local authenticated attacker to delete arbitrary files.
- risk 0.37cvss 5.7epss 0.01
A hardcoded secret in Ivanti DSM before 2024.2 allows an authenticated attacker on an adjacent network to decrypt sensitive data including user credentials.