Lucene search
TrellixCVELIST:CVE-2023-3665HistoryOct 04, 2023 - 2:32 p.m.
CVE-2023-3665
2023-10-0414:32:52
CWE-74
trellix
www.cve.org
7
trellix ens
code injection
denial of service
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
5.1%
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables,
leading to denial of service and or the execution of arbitrary code.
CNA Affected
[
{
"defaultStatus": "unaffected",
"platforms": [
"Linux"
],
"product": "Trellix Endpoint Security",
"vendor": "Trellix ",
"versions": [
{
"status": "affected",
"version": "10.7.0"
}
]
}
]Related
cve
cve
CVE-2023-3665
2023-10-04 15:15:12
prion
prion
Code injection
2023-10-04 15:15:00
nessus
nessus
vulnrichment
vulnrichment
CVE-2023-3665
2023-10-04 14:32:52
nvd
nvd
CVE-2023-3665
2023-10-04 15:15:12
CVSS3
5.5
Attack Vector
LOCAL
Attack Complexity
LOW
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
NONE
Integrity Impact
HIGH
Availability Impact
NONE
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:N/I:H/A:N
EPSS
0
Percentile
5.1%
Related for CVELIST:CVE-2023-3665