Logo
-

Byte Open Security

(ByteOS Network)

Log In

Sign Up

ByteOS

Security
Vulnerability Details
Registries
Custom Views
Weaknesses
Attack Patterns
Filters & Tools
NVD Vulnerability Details :
CVE-2024-9537
Analyzed
More InfoOfficial Page
Source-9119a7d8-5eab-497f-8521-727c672e3725
View Known Exploited Vulnerability (KEV) details
Published At-18 Oct, 2024 | 15:15
Updated At-03 Nov, 2025 | 18:55

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

CISA Catalog
Date AddedDue DateVulnerability NameRequired Action
2024-10-212024-11-11ScienceLogic SL1 Unspecified VulnerabilityApply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Date Added: 2024-10-21
Due Date: 2024-11-11
Vulnerability Name: ScienceLogic SL1 Unspecified Vulnerability
Required Action: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.
Metrics
TypeVersionBase scoreBase severityVector
Secondary4.09.3CRITICAL
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red
Secondary3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Primary3.19.8CRITICAL
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Secondary
Version: 4.0
Base score: 9.3
Base severity: CRITICAL
Vector:
CVSS:4.0/AV:N/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:Red
Type: Secondary
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Type: Primary
Version: 3.1
Base score: 9.8
Base severity: CRITICAL
Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CPE Matches
ScienceLogic, Inc.
sciencelogic
>>sl1>>Versions from 10.1.0(inclusive) to 12.1.3(exclusive)
cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*
ScienceLogic, Inc.
sciencelogic
>>sl1>>Versions from 12.2.0(inclusive) to 12.2.3(exclusive)
cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:*
Weaknesses
CWE IDTypeSource
NVD-CWE-noinfoPrimarynvd@nist.gov
CWE ID: NVD-CWE-noinfo
Type: Primary
Source: nvd@nist.gov
Evaluator Description
Evaluator Impact

Evaluator Solution

Vendor Statements
References
HyperlinkSourceResource
https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/9119a7d8-5eab-497f-8521-727c672e3725
Press/Media Coverage
https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/16909119a7d8-5eab-497f-8521-727c672e3725
Vendor Advisory
https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a69119a7d8-5eab-497f-8521-727c672e3725
Third Party Advisory
https://support.sciencelogic.com/s/article/154659119a7d8-5eab-497f-8521-727c672e3725
Permissions Required
https://support.sciencelogic.com/s/article/155279119a7d8-5eab-497f-8521-727c672e3725
Permissions Required
https://twitter.com/ynezzor/status/18399316411724679079119a7d8-5eab-497f-8521-727c672e3725
Third Party Advisory
https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/9119a7d8-5eab-497f-8521-727c672e3725
Press/Media Coverage
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-95379119a7d8-5eab-497f-8521-727c672e3725
Third Party Advisory
US Government Resource
https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/9119a7d8-5eab-497f-8521-727c672e3725
Press/Media Coverage
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537134c704f-9b21-4f2e-91b3-4a467353bcc0
US Government Resource
Hyperlink: https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Press/Media Coverage
Hyperlink: https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Vendor Advisory
Hyperlink: https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Third Party Advisory
Hyperlink: https://support.sciencelogic.com/s/article/15465
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Permissions Required
Hyperlink: https://support.sciencelogic.com/s/article/15527
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Permissions Required
Hyperlink: https://twitter.com/ynezzor/status/1839931641172467907
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Third Party Advisory
Hyperlink: https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Press/Media Coverage
Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Third Party Advisory
US Government Resource
Hyperlink: https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/
Source: 9119a7d8-5eab-497f-8521-727c672e3725
Resource:
Press/Media Coverage
Hyperlink: https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537
Source: 134c704f-9b21-4f2e-91b3-4a467353bcc0
Resource:
US Government Resource
Change History
0Changes found
Details not found