Paper/Archive/CVE-2024-5671

CVE-2024-5671

Trellix Intrusion Prevention System (IPS) Manager — Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution…

EPSS 0.9%CVSS 9.8

critical.is priorityof 100

CVSS 9.8 (CNA)9.8 / 10 × 3029.4 Not in CISA KEV+300.0 EPSS percentile 60.6.606 × 2012.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.

Affected

ProductAffectedFixed inSource

Intrusion Prevention System (IPS) ManagerPrior to 11.1.x–CNA

intrusion_prevention_system_manager< 11.1.x11.1.xCISA-ADP

Scores by source

trellix (CNA)9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

refthrive.trellix.com/s/article/000013623