CVE-2025-22458

Name of the Vulnerable Software and Affected Versions Ivanti Endpoint Manager versions prior to 2024 SU1 Ivanti Endpoint Manager versions prior to 2022 SU7

Description An authenticated attacker can achieve local privilege escalation to System and establish persistence. The issue occurs because a SYSTEM task loads DLLs from user-writable paths, enabling DLL hijacking, which is a technique where an application is tricked into loading a malicious DLL instead of the intended one.

Recommendations Update to version 2024 SU1 or later. Update to version 2022 SU7 or later.