Pakistan’s National Computer Emergency Response Team (CERT) has issued a high-risk cybersecurity alert after discovering a critical flaw in Ivanti Endpoint Manager Mobile, a system widely used to manage mobile devices in offices and government departments.
Ivanti Endpoint Manager Mobile (EPMM) is a mobile device management (MDM) and Unified Endpoint Management (UEM) solution used by organizations to manage and secure mobile devices, such as smartphones and tablets, across an enterprise or government environment. It helps IT teams control policies for devices, applications, and data from a central platform
The vulnerability is already being exploited globally and allows hackers to take full control of affected systems without needing a username or password. Authorities have urged organizations to apply emergency fixes without delay.
According to the advisory, the flaw affects on-premises versions of Ivanti Endpoint Manager Mobile (EPMM), a platform used by organizations to manage smartphones, tablets, applications, and security policies from a central system. Such tools are commonly used by enterprises and government bodies to secure mobile access to emails, internal networks, and sensitive data.
Impact
Successful exploitation of these vulnerabilities may result in:
Successful exploitation of these vulnerabilities may result in:
Complete System Compromise- Full administrative control of EPMM appliances
Sensitive Data Exposure – Access to managed mobile device data and credentials
Policy Manipulation – Unauthorized modification of device configurations and security policies