Actively exploited · Published Oct 18, 2024 · Assigned by cisa-cg
CVE-2024-9537ScienceLogic SL1 unspecified vulnerability
Critical 9.8 Exploited
In plain English
A critical-severity security flaw in SL1 from ScienceLogic. Attackers are actively exploiting it in the wild (listed by CISA on October 21, 2024). The chance it is exploited in the next 30 days is estimated at 3.8% (higher than 90% of all known vulnerabilities). Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
CISA guidance
Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Federal agencies must remediate by Nov 11, 2024.
Official description
ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| ScienceLogic | SL1 | 0 – before 12.1.30 – before 12.2.30 – before 12.30 – before 10.1.x0 – before 10.2.x0 – before 11.1.x0 – before 11.2.x0 – before 11.3.x |
References
- https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6
- https://twitter.com/ynezzor/status/1839931641172467907
- https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/ media-coverage
- https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/ third-party-advisory
- https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/ media-coverage
- https://support.sciencelogic.com/s/article/15465 vendor-advisory
- https://support.sciencelogic.com/s/article/15527 vendor-advisory
- https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690 release-notes
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537 government-resource
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537 government-resource