Description
Ivanti Endpoint Manager（EPM） 是一款企业级的设备管理解决方案，提供设备配置、补丁管理和软件分发等功能。
2024 年 9 月，互联网公开披露了该系统中的一个远程代码执行漏洞（CVE-2024-29847）。经分析，攻击者可以利用该漏洞在无需用户交互的情况下，执行远程代码获得服务器的最高权限，建议受影响的客户尽快修复漏洞。
影响版本
version < 2022SU6
version < 2024 September Update
Ivanti Endpoint Manager 远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://www.venustech.com.cn/new_type/aqldfx/20260203/29148.html
https://blog.nsfocus.net/cve-2025-44/
https://www.anquanke.com/post/id/307365
https://bbs.chaitin.cn/topic/2797
https://www.gm7.org/archives/38621
https://www.secrss.com/articles/70243
https://www.cisecurity.org/advisory/multiple-vulnerabilities-in-ivanti-endpoint-manager-mobile-could-allow-for-remote-code-execution_2026-009
https://www.bleepingcomputer.com/news/security/ivanti-warns-of-new-epmm-flaw-exploited-in-zero-day-attacks/
https://thehackernews.com/2026/05/ivanti-epmm-cve-2026-6973-rce-under.html
https://arcticwolf.com/resources/blog-uk/cve-2026-1281-and-cve-2026-1340-unauthenticated-rce-zero-day-vulnerabilities-in-ivanti-endpoint-manager-mobile/
https://forums.ivanti.com/s/article/Security-Advisory-Ivanti-Endpoint-Manager-Mobile-EPMM
https://nvd.nist.gov/vuln/detail/CVE-2026-1281
https://www.rapid7.com/blog/post/2025/05/16/etr-ivanti-epmm-exploit-chain-exploited-in-the-wild/