ScienceLogic SL1 unspecified vulnerability
Priority CRITICAL 99Exploited in the wildPublished · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Attack requirements
- None
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Fixed
Attack profile from CVSS 4.0 · CNA. Fix status from CNA.
Summary
ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.
Why it matters now
Exploitation Active In CISA KEV since 2024-10-21CISA due date 2024-11-11
EPSS 0.03826 90th percentileScored 2026-11-07
Fix Fixed SL1 (ScienceLogic): 12.1.3, 12.2.3, 12.3 +5
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- Active
- Automatable
- Yes
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| ScienceLogic | SL1 | before 12.1.3; before 12.2.3; before 12.3; before 10.1.x; before 10.2.x; before 11.1.x; before 11.2.x; before 11.3.x | 12.1.3, 12.2.3, 12.3, 10.1.x, 10.2.x, 11.1.x, 11.2.x, 11.3.x | Patch available | CNA |
- SL1 VendorScienceLogic Affected before 12.1.3; before 12.2.3; before 12.3; before 10.1.x; before 10.2.x; before 11.1.x; before 11.2.x; before 11.3.x Fixed in 12.1.3, 12.2.3, 12.3, 10.1.x, 10.2.x, 11.1.x, 11.2.x, 11.3.x Patch available CNA
CPE configurations NVD · 1
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:* | 10.1.0 to before 12.1.3; 12.2.0 to before 12.2.3 | Vulnerable | ScienceLogic |
- cpe:2.3:a:sciencelogic:sl1:*:*:*:*:*:*:*:* Versions 10.1.0 to before 12.1.3; 12.2.0 to before 12.2.3 Vulnerable ·ScienceLogic
Remediation
- Fix · CNA SL1 (ScienceLogic) Fixed in 12.1.3, 12.2.3, 12.3, 10.1.x, 10.2.x, 11.1.x, 11.2.x, 11.3.x
Timeline
- 2024-10-21 Added to CISA KEV
- 2026-10-02 Threatist record created from CVE-2024-9537
- 2026-10-03 Alias added: GHSA-qm34-9r78-66cq
- 2026-10-21 EPSS moved to the 90th–95th percentile
References
Advisory 7
- https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6
- https://twitter.com/ynezzor/status/1839931641172467907
- https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/
- https://support.sciencelogic.com/s/article/15465
- https://support.sciencelogic.com/s/article/15527
- https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537
More ScienceLogic Sl1 vulnerabilities
- TI-2022-24120 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
- TI-2022-24119 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
- TI-2022-24118 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
- TI-2022-24117 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
- TI-2022-24116 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
- TI-2022-24140 OS command injection in ScienceLogic SL 1 CVSS 3.1HIGH 8.8
Sources
- CVE-2024-9537 · CVE Program
- CVE-2024-9537 · NVD
- CISA Known Exploited Vulnerabilities
- FIRST EPSS
- GHSA-qm34-9r78-66cq · GitHub Advisory Database · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences