CVE-2021-44529

CVE Database · CVE-2021-44529

CVE-2021-44529

· CRITICALAnalyzed

CVSS v3.1

9.8

EPSS

99.11%

Published

Dec 8, 2021

Modified

Nov 3, 2025

CISA Known Exploited Vulnerability

Added: 2024-03-25 · Due: 2024-04-15

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Public PoC / Exploit (3)

All weaponized →

Exploit-DBIvanti Endpoint Manager 4.6 - Remote Code Execution (RCE)NucleiNuclei detection template TrickestTrickest PoC index

Links to public security research (Exploit-DB, Nuclei, Trickest, GitHub) for defensive use only.

Description

A code injection vulnerability in the Ivanti EPM Cloud Services Appliance (CSA) allows an unauthenticated user to execute arbitrary code with limited permissions (nobody).

CVSS Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-94CWE-94

Affected Products (2)

ivanti · endpoint_manager_cloud_services_appliancevulnerable

References (7)

http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html

ExploitThird Party AdvisoryVDB Entry

http://packetstormsecurity.com/files/170590/Ivanti-Cloud-Services-Appliance-CSA-Command-Injection.html

ExploitThird Party AdvisoryVDB Entry

https://forums.ivanti.com/s/article/SA-2021-12-02

MitigationPatchVendor Advisory

http://packetstormsecurity.com/files/166383/Ivanti-Endpoint-Manager-CSA-4.5-4.6-Remote-Code-Execution.html

ExploitThird Party Advisory

KEV Catalog EPSS Scores Vendors All CVEs