CVE-2024-8321

published 2024-09-10

CVE-2024-8321: Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate…

Priority P2 61 high 8.6 CVSS 3.1

AV N AC L PR N UI N S C C N I N A H

Missing authentication in Network Isolation of Ivanti EPM before 2022 SU6, or the 2024 September update allows a remote unauthenticated attacker to isolate managed devices from the network.

Affected

3 ranges

Vendor	Product	Version range	Fixed in
ivanti	endpoint_manager	< 2022	2022
ivanti	endpoint_manager	—	—
ivanti	endpoint_manager	—	—

Detection & IOCs extracted from sources · hover to see the quote

• → The vulnerability exists in the Network Isolation feature of Ivanti EPM. Monitor for unauthenticated requests to the Network Isolation endpoint, particularly from external/untrusted sources attempting to isolate managed devices. ↗
• → CWE-306 (Missing Authentication for Critical Function) — alert on unauthenticated calls to critical Network Isolation API functions in Ivanti EPM logs. ↗

• · Vulnerable versions are Ivanti EPM before 2022 SU6 and before the 2024 September update. Ensure patching to these versions to remediate. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-306