Critical · 9.8 CVE-2024-11482 EUVD-2024-34063GHSA-whhw-2v2c-qg98

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through comm…

Published Nov 29, 2024 · Updated Mar 18, 2025 · Assigned by trellix

Vendor: Trellix Product: Trellix Enterprise Security Manager (ESM)

Description

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Affected products

Vendor	Product	Affected	Fixed
Trellix	Trellix Enterprise Security Manager (ESM)	11.6.12	—

Advisories 1

WID-SEC-2024-3538 Trellix Enterprise Security Manager: Mehrere Schwachstellen ermöglichen Umgehen von Sicherheitsvorkehrungen BSI CERT-Bund (WID) · Nov 24, 2024

References

https://thrive.trellix.com/s/article/000014058#h2_0