CVE-2024-5671

Published: Jun 14, 2024Modified: Jun 17, 2026Deferred

9.8

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Exploitability: 3.9 / Impact: 5.9

Source: trellixpsirt@trellix.com (Secondary)

Description

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.

Related CWEs

CWE-502

Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently verifying that the resulting data will be valid.

References (2)

https://thrive.trellix.com/s/article/000013623

Source: trellixpsirt@trellix.com

https://thrive.trellix.com/s/article/000013623

Source: af854a3a-2127-422b-91ae-364da2661108

Timeline

No history available yet.