SARA / Free Tools / CVE / CVE-2024-9537

CVE-2024-9537 — ScienceLogic SL1 Unspecified Vulnerability

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions bac

CVSS
9.8 CRITICAL
EPSS
63.91% (top 1.60%)
CWE
Published
2024-10-18T14:45:02.147Z
Last modified
2025-10-21T22:55:42.397Z
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA KEV — Actively Exploited
Added to KEV
2024-10-21
BOD 22-01 due
2024-11-11
Ransomware use
Unknown

01What is this vulnerability?

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

02Affected products

VendorProductVersions
ScienceLogicSL10, 0, 0, 0, 0, 0, 0, 0

03Active exploitation status

Yes — actively exploited. Added to the CISA KEV catalog on 2024-10-21. Ransomware use: Unknown.

04Recommended remediation

05Technical details

For the full vendor write-up, exploit chains, and reference implementations, see the references list in section 09.

06Detection signatures

Open the Sigma generator with a pre-filled prompt for this CVE to draft a starting detection in your stack of choice:

Open in Sigma generator →

07Related CVEs

No directly-cited follow-up CVEs in the KB record for this advisory. The references list in section 09 carries the vendor cross-references.

08Timeline

09References

Want this in your SOAR or SIEM?
SARA's API returns EPSS, CVSS, KEV, and an analyst-grade summary in one call.
Read the API reference →