CVEvulnerability

CVE-2025-22464

6.1 MEDIUM Published 2025-04-08 Modified 2026-06-17 Official page ↗
Status
Analyzed
Published
2025-04-08
Last modified
2026-06-17
Assigner
3c1d8aa1-5a33-4ea4-8992-aadd6440af75
CVSS 3.1 (3c1d8aa1-5a33-4ea4-8992-aadd6440af75)
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:L/A:H
Weaknesses
CWE-822

Description

An untrusted pointer dereference vulnerability in Ivanti Endpoint Manager before version 2024 SU1 or before version 2022 SU7 allows an attacker with local access to write arbitrary data into memory causing a denial-of-service condition.

Affected configurations

• ivanti endpoint manager (< 2022) • ivanti endpoint manager 2022 • ivanti endpoint manager 2024

Related

Weakness · CWE (1)

  • CWE-822 Untrusted Pointer Dereference weakness

References