CVE-2024-11482: A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection…

PriorityP273critical9.8CVSS 3.1

AVNACLPRNUINSUCHIHAH

EPSS

2.54%

83.0th percentile

A vulnerability in ESM 11.6.10 allows unauthenticated access to the internal Snowservice API and enables remote code execution through command injection, executed as the root user.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
trellix	enterprise_security_manager	—	—
trellix	trellix_enterprise_security_manager	—	—

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.