Description
A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables,
leading to denial of service and or the execution of arbitrary code.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Trellix | Trellix Endpoint Security | 10.7.0 | — |
Advisories 1
- WID-SEC-2023-2435 Trellix Endpoint Security: Schwachstelle ermöglicht Denial of Service oder Codeausführung BSI CERT-Bund (WID) · Sep 24, 2023