CVE-2024-9537 ScienceLogic SL1 unspecified vulnerability

🗓️ 18 Oct 2024 14:45:02Reported by cisa-cgType

ScienceLogic SL1 unspecified vulnerability involving third-party componen

Reporter	Title	Published	Views	Family All 14
ATTACKERKB	CVE-2024-9537	18 Oct 202400:00	–	attackerkb
Circl	CVE-2024-9537	18 Oct 202417:45	–	circl
CISA KEV Catalog	ScienceLogic SL1 Unspecified Vulnerability	21 Oct 202400:00	–	cisa_kev
CISA	CISA Adds One Known Exploited Vulnerability to Catalog	21 Oct 202412:00	–	cisa
CNNVD	ScienceLogic SL1 安全漏洞	18 Oct 202400:00	–	cnnvd
CVE	CVE-2024-9537	18 Oct 202414:45	–	cve
NVD	CVE-2024-9537	18 Oct 202415:15	–	nvd
OSV	CVE-2024-9537	18 Oct 202415:15	–	osv
Positive Technologies	PT-2024-39683 · Sciencelogic · Sciencelogic Sl1	18 Oct 202400:00	–	ptsecurity
Tenable Nessus	ScienceLogic SL1 10.1.x < 12.1.3 / 12.2.x < 12.2.3 (CVE-2024-9537)	16 Jan 202600:00	–	nessus

[
  {
    "defaultStatus": "unknown",
    "product": "SL1",
    "vendor": "ScienceLogic",
    "versions": [
      {
        "lessThan": "12.1.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.2.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "12.3",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.1.x",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "10.2.x",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "11.1.x",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "11.2.x",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      },
      {
        "lessThan": "11.3.x",
        "status": "affected",
        "version": "0",
        "versionType": "custom"
      }
    ]
  }
]

Source	Link
bleepingcomputer	www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/
arcticwolf	www.arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/
community	www.community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690
rackspace	www.rackspace.service-now.com/system_status
theregister	www.theregister.com/2024/09/30/rackspace_zero_day_attack/
support	www.support.sciencelogic.com/s/article/15527
cisa	www.cisa.gov/known-exploited-vulnerabilities-catalog
support	www.support.sciencelogic.com/s/article/15465
twitter	www.twitter.com/ynezzor/status/1839931641172467907

21 Oct 2024 15:50Current

CVSS 49.3

CVSS 3.19.8

EPSS0.03852

sciencelogic vulnerability third-party component unspecified .