ScienceLogic SL1 Unspecified Vulnerability

[ Why it matters ]Priority signals

• Exploited in the wild: on CISA's Known Exploited Vulnerabilities list since 2024-10-21
• Critical severity: CVSS 9.8

[ Description ]Official description

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

CISA: ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component.

[ Fixes ]Fixes and patches

CISA required action (US federal deadline 11 Nov 2024): Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

No fix or interim patch is linked from our sources yet. Check the vendor references below and limit exposure of affected systems until a fix is available.

[ References ]References

• arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-science…Press/Media Coverage
• community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-…Vendor Advisory
• rackspace.service-now.com/system_statusThird Party Advisory
• support.sciencelogic.com/s/article/15465Permissions Required
• support.sciencelogic.com/s/article/15527Permissions Required
• twitter.com/ynezzor/status/1839931641172467907Third Party Advisory
• www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic…Press/Media Coverage
• www.cisa.gov/known-exploited-vulnerabilities-catalogThird Party AdvisoryUS Government Resource
• www.theregister.com/2024/09/30/rackspace_zero_day_attackPress/Media Coverage
• www.cisa.gov/known-exploited-vulnerabilities-catalogUS Government Resource