CVE-2024-9537: sciencelogic sl1

csirt@kutim:~/threat-intel/cve/CVE-2024-9537

CVSS 9.8 · Critical KEV · sudah dieksploitasi EPSS 3,8%

Kerentanan pada sciencelogic sl1. Skor CVSS 3.1 9.8 (Critical) menurut NVD. Masuk katalog KEV CISA pada 21 Oktober 2024, artinya sudah terbukti dieksploitasi.

Deskripsi (NVD)

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

Rincian

Terbit di NVD: 18 Oktober 2024
Terakhir diubah: 17 Juni 2026
Status NVD: Analyzed
CVSS 3.1: 9.8 (Critical), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator
EPSS (30 hari): 3,8% peluang dieksploitasi; lebih tinggi dari 89,8% CVE lain

Known Exploited Vulnerabilities (CISA)

Nama: ScienceLogic SL1 Unspecified Vulnerability
Masuk KEV: 21 Oktober 2024
Tenggat CISA: 11 November 2024 (untuk instansi federal AS)
Ransomware: Belum tercatat
Tindakan wajib: Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Produk dan versi terdampak

Vendor	Produk	Versi terdampak
sciencelogic	sl1	Versi 10.1.0 hingga sebelum 12.1.3
sciencelogic	sl1	Versi 12.2.0 hingga sebelum 12.2.3

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-20... advisory vendor
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537 advisory pihak ketiga · pemerintah AS
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537 pemerintah AS
https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6 advisory pihak ketiga
https://twitter.com/ynezzor/status/1839931641172467907 advisory pihak ketiga
https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-thir... press/media coverage
https://support.sciencelogic.com/s/article/15465 permissions required
https://support.sciencelogic.com/s/article/15527 permissions required
https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attac... press/media coverage
https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/ press/media coverage

Sumber: NVD · CVE.org · KEV CISA · EPSS. Halaman ini disusun otomatis dari data tersebut; pembaruan terakhir 5 Okt 2026, 20:11 WITA. Kalau sistem di Perangkat Daerah memakai produk ini dan butuh bantuan, laporkan lewat kanal pelaporan.