CVE-2022-30121: Ivanti Endpoint Manager

Medium severity, CVSS 6.7. EPSS: 0.3% chance of exploitation in the next 30 days.

The “LANDesk(R) Management Agent” service exposes a socket and once connected, it is possible to launch commands only for signed executables. This is a security bug that allows a limited user to get escalated admin privileges on their system.

Affected products

• Ivanti Endpoint Manager: before 2021.1.1 (fixed in 2021.1.1); version 2021.1.1 only

Published 2022-09-23. Last modified 2026-06-17.