9.8
CVE-2024-11482
- EPSS 4.7%
- Veröffentlicht 29.11.2024 08:15:04
- Zuletzt bearbeitet 28.10.2025 18:34:25
- Quelle trellixpsirt@trellix.com
- CVE-Watchlists
- Unerledigt
A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Trellix ≫ Enterprise Security Manager Version11.6.10
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. 
Login
Login| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 4.7% | 0.894 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| trellixpsirt@trellix.com | 9.8 | 3.9 | 5.9 |
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
The product constructs all or part of an OS command using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended OS command when it is sent to a downstream component.