PT-2024-39683 · Sciencelogic · Sciencelogic Sl1

Ynezz@Ynezzor · Published 2024-10-18 · Updated 2024-11-04 · CVE-2024-9537

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Critical

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions ScienceLogic SL1 versions prior to 12.1.3 ScienceLogic SL1 versions prior to 12.2.3 ScienceLogic SL1 versions prior to 12.3+ ScienceLogic SL1 versions 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x

Description The issue involves an unspecified vulnerability in an unspecified third-party component packaged with ScienceLogic SL1. This vulnerability allows for remote code execution and has been exploited in the wild, including a security incident at Rackspace. The estimated number of potentially affected devices is not specified.

Recommendations For ScienceLogic SL1 versions prior to 12.1.3, update to version 12.1.3 or later. For ScienceLogic SL1 versions prior to 12.2.3, update to version 12.2.3 or later. For ScienceLogic SL1 versions prior to 12.3+, update to version 12.3+ or later. For ScienceLogic SL1 versions 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x, apply the available remediations to mitigate the vulnerability. As a temporary workaround, consider restricting access to the vulnerable component until a patch is available.

Fix

Related Identifiers

CVE-2024-9537

Affected Products

Sciencelogic Sl1

References · 47

• https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2024-9537 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2024-9537 · Security Note
• https://support.sciencelogic.com/s/article/15465 · Vendor Advisory
• https://twitter.com/VulmonFeeds/status/1847320721606787506 · Twitter Post
• https://twitter.com/zoomeye_team/status/1849037635005886630 · Twitter Post
• https://bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack · Note
• https://twitter.com/DMFezzaReed/status/1848380260112310659 · Twitter Post
• https://t.me/cvenotify/99050 · Telegram Post
• https://twitter.com/CCBalert/status/1848736842042024395 · Twitter Post
• https://twitter.com/Dinosn/status/1848385329440440756 · Twitter Post
• https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6 · Note
• https://t.me/cvenotify/98803 · Telegram Post
• https://support.sciencelogic.com/s/article/15527 · Security Note, Vendor Advisory
• https://twitter.com/iSecurity/status/1848644987766075455 · Twitter Post