Vulnerability in Ivanti EPMM Becomes Fifth Security Breach Since June 2023, Concerns Experts

The Australian Cyber Security Centre (ACSC) has shared an update about another vulnerability. There have been reports of an Ivanti Endpoint Manager Mobile (EPMM) vulnerability that affects all supported versions 11.10, 11.9, and 11.8, including its older releases, as shared on the ACSC website. This is the fifth vulnerability in the last two months and hence is a serious concern for the Australian government, businesses, and citizens.

As per the information shared, an unauthorised, remote (internet-facing) actor might exploit this vulnerability to access users’ personally identifiable information and perform minimal server modifications. Patches are available for all supported versions in the Ivanti MobileIron security advisory.

Mitigation Advice for Australian Businesses

Australian businesses are advised to scan their networks for susceptible Ivanti EPMM instances. Updating EPMM with patch versions (11.8.1.1, 11.9.1.1, and 11.10.0.2) through the system management portal is advised by the Ivanti EPMM security advice.

Organisations unable to update should immediately consult the advisory’s details to implement an RPM-based fix or check with experienced consultants. Organisations are also urged to get familiar with the resources and guidance offered by the ACSC.

Who to Seek Help?

The ACSC has been monitoring the vulnerability and sharing updates and offering support to businesses and individuals impacted by the threat.

Anitech has been closely following ACSC’s all vulnerability updates and our consultants are helping organisations update patches and overcome the various vulnerabilities reported so far.

Organisations can contact us for assistance on Ivanti EPMM vulnerability at 1300 802 163 or e-mail – sales@anitechgroup.com.

Our team will be happy to help with robust security solutions and help organisations understand the vulnerability as well as the right way to patch it.

Our strategic security framework shall also help businesses prepare for future uncalled vulnerabilities.

Subscribe to our newsletter and stay tuned to our website for such updates and expert  solutions.