Ivanti Endpoint Manager is vulnerable to remote code execution due to an improper code resource management flaw that requires user interaction.

This vulnerability involves improper control of dynamically managed code resources (CWE-913). An unauthenticated, remote attacker can leverage this flaw to write arbitrary files to the server, which may lead to remote code execution, provided the attacker can facilitate the required user interaction.

The ability to perform arbitrary file writes on a core management server poses a severe risk to organizational infrastructure. With a CVSS score of 8.8, this vulnerability represents a high-severity threat that could lead to full system compromise, data theft, and the deployment of malicious payloads across the managed environment.

Immediate Action: Upgrade all instances of Ivanti Endpoint Manager to version 2024 SU4 SR1 or later to apply the necessary security fixes.

Proactive Monitoring: Review server access logs for suspicious file write operations or unexpected modifications to configuration files and code directories.

Compensating Controls: Deploy Web Application Firewall (WAF) rules to inspect incoming traffic for patterns associated with unauthorized file system access or manipulation requests.

Public Exploit Available: Unknown

Given the high CVSS score and the potential for total system compromise, this vulnerability should be prioritized for immediate remediation. Security teams must ensure that the update to 2024 SU4 SR1 is applied to all internet-facing instances of Ivanti Endpoint Manager to mitigate the risk of remote code execution.