Critical severity · published Jun 14, 2024
CVE-2024-5671
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS…
9.8
CVSS
0.9%
EPSS
No
On KEV
Description
Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
None
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
IP
Intrusion Prevention System (IPS) Manager · Trellix
Prior to 11.1.x · source: vendor
IP
Intrusion Prevention System Manager · Trellix
before 11.1.x · source: CISA
Affected product
IP
Intrusion Prevention System (IPS) Manager
Trellix
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2024-5671
CVE.org
https://www.cve.org/CVERecord?id=CVE-2024-5671
thrive.trellix.com
https://thrive.trellix.com/s/article/000013623
More from Intrusion Prevention System (IPS) Manager
7.5
CVE-2024-5957
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain APIs access of the Manager
6.8
CVE-2024-5731
A vulnerability in the IPS Manager, Central Manager, and Local Manager communication workflow allows an attacker to control the destination of a request by manipulating the…
5.3
CVE-2024-5956
This vulnerability allows unauthenticated remote attackers to bypass authentication and gain partial data access to the vulnerable Trellix IPS Manager with garbage data in…