CVE-2024-9537: ScienceLogic SL1 unspecified vulnerability
In CISA’s Known Exploited Vulnerabilities catalog: ScienceLogic SL1 Unspecified Vulnerability.
Added , federal remediation due . Known ransomware use: Unknown.
Required action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Description
ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.
Vector CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Status incidents that name it
No tracked status incident names this CVE.
Affected vendors and products
sciencelogic: sl1ScienceLogic: SL1
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-scie… (opens in new tab)
- community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september… (opens in new tab)
- rackspace.service-now.com/system_status (opens in new tab)
- support.sciencelogic.com/s/article/15465 (opens in new tab)
- support.sciencelogic.com/s/article/15527 (opens in new tab)
- twitter.com/ynezzor/status/1839931641172467907 (opens in new tab)
- www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-d… (opens in new tab)
- www.cisa.gov/known-exploited-vulnerabilities-catalog (opens in new tab)
- www.theregister.com/2024/09/30/rackspace_zero_day_attack/ (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)