CISA adds ScienceLogic flaw CVE-2024-9537 to its KEV Catalog

The US CISA has added ScienceLogic vulnerability to its Known Exploited Vulnerability Catalog based on the evidence or active exploitation

The vulnerability tracked as CVE-2024-9537 with a CVSSscore of 9.8, its remains unspecified the type of vulnerability stems in ScienceLogic platform.

ScienceLogic SL1 (formerly EM7) is an IT operations platform for monitoring, analyzing, and automating an organization’s infrastructure, including cloud, networks, and applications and provides real-time visibility, event correlation, and automated workflows to help manage and optimize IT environments efficiently.

Rackspace, a managed cloud computing (hosting, storage, IT support) company, uses ScienceLogic SL1 to monitor its IT infrastructure and services.

Last month, Rackspace was intruded by abusing this zero-day vulnerability, giving the criminals access to three of Rackspace’s internal monitoring web servers and  limited monitoring information.Customer account names and numbers, customer usernames, Rackspace internally generated device IDs, names and device information, device IP addresses, and AES256 encrypted Rackspace internal device agent credentials.

Affected versions

• 12.1.3 
• 12.2.3 
• 12.3 
• 10.1.x 
• 10.2.x 
• 11.1.x 
• 11.2.x 
• 11.3.x 

CISA has set November 11, 2024, has a deadline for federal agencies to remediate the vulnerability