by Kastro
Paper/Archive/CVE-2024-11482

CVE-2024-11482

Trellix Trellix Enterprise Security Manager (ESM) — A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through co…

EPSS 3%CVSS 9.8
critical.is priorityof 100
46
CVSS 9.8 (CNA)9.8 / 10 × 3029.4Not in CISA KEV+300.0EPSS percentile 84.9.849 × 2017.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Affected

ProductAffectedFixed inSource
Trellix Enterprise Security Manager (ESM)11.6.12–CNA
enterprise_security_manager11.6.12–CISA-ADP

Scores by source

trellix (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refthrive.trellix.com/s/article/000014058#h2_0refhackerone.com/reports/2817658