CVE Vulnerability Advisory Database
Filter vulnerabilities by CVSS severity, active CISA KEV exploitation, and technology stack.
Showing 1โ1 of 1 advisories (Page 1/1)
2024-10-18
ScienceLogic SL1 (formerly EM7) Third-Party Component Remote Code Execution Vulnerability (CVE-2024-9537) Urgent Security Advisory
[Affected Scope] ScienceLogic SL1 (formerly EM7) versions prior to 12.1.3, 12.2.3, and 12.3, including older lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x
[Impact] Unauthenticated remote attackers can exploit an unspecified third-party component packaged with SL1 to execute arbitrary commands and gain full system control
[Mitigation] Immediately upgrade to patched SL1 versions (12.1.3+, 12.2.3+, 12.3+) or apply the corresponding hotfixes for your specific version line