CVE-2024-9537 - CVE | ByteOS Network

CVE Vulnerability Details :

CVE-2024-9537

PUBLISHED

More Info Official Page

Assigner-cisa-cg

Assigner Org ID-9119a7d8-5eab-497f-8521-727c672e3725

View Known Exploited Vulnerability (KEV) details

Published At-18 Oct, 2024 | 14:45

Updated At-21 Oct, 2025 | 22:55

▼CVE Numbering Authority (CNA)

ScienceLogic SL1 unspecified vulnerability

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

Affected Products

Vendor

ScienceLogic, Inc.

Product

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Metrics

Version	Base score	Base severity	Vector
3.1	9.8	CRITICAL	CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
4.0	9.3	CRITICAL	CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red

Version: 3.1

Base score: 9.8

Base severity: CRITICAL

Vector:

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Version: 4.0

Base score: 9.3

Base severity: CRITICAL

Vector:

CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/U:Red

References

Hyperlink	Resource
https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6	N/A
https://twitter.com/ynezzor/status/1839931641172467907	N/A
https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/	media-coverage
https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/	third-party-advisory
https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/	media-coverage
https://support.sciencelogic.com/s/article/15465	vendor-advisory
https://support.sciencelogic.com/s/article/15527	vendor-advisory
https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690	release-notes
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537	government-resource

Hyperlink: https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6

Resource: N/A

Hyperlink: https://twitter.com/ynezzor/status/1839931641172467907

Resource: N/A

Hyperlink: https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/

Resource:

media-coverage

Hyperlink: https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/

Resource:

third-party-advisory

Hyperlink: https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/

Resource:

media-coverage

Hyperlink: https://support.sciencelogic.com/s/article/15465

Resource:

vendor-advisory

Hyperlink: https://support.sciencelogic.com/s/article/15527

Resource:

vendor-advisory

Hyperlink: https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690

Resource:

release-notes

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537

Resource:

government-resource

▼Authorized Data Publishers (ADP)

CISA ADP Vulnrichment

Affected Products

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Vendor

ScienceLogic, Inc.

Product

CPEs

cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*

Default Status

unknown

Versions

Affected

From 0 before 12.1.3 (custom)
From 0 before 12.2.3 (custom)
From 0 before 12.3 (custom)
From 0 before 10.1.x (custom)
From 0 before 10.2.x (custom)
From 0 before 11.1.x (custom)
From 0 before 11.2.x (custom)
From 0 before 11.3.x (custom)

Problem Types

Type	CWE ID	Description
CWE	CWE-noinfo	CWE-noinfo Not enough information

Type: CWE

CWE ID: CWE-noinfo

Description: CWE-noinfo Not enough information

Metrics Other Info

kev

dateAdded:

2024-10-21

reference:

https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537

Timeline

Event	Date
CVE-2024-9537 added to CISA KEV	2024-10-21 00:00:00

Event: CVE-2024-9537 added to CISA KEV

Date: 2024-10-21 00:00:00

References

Hyperlink	Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537	government-resource

Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537

Resource:

government-resource