Reference page — cumulative record through Wednesday, October 7, 2026 UTC. Reference pages update as the archive grows; only dated daily editions are immutable pages of record.

CVE-2024-9537

CVE-2024-9537CRITICAL

ScienceLogic SL1 unspecified vulnerability

  AV  AC  AT  PR  UI  VC  VI  VA   CVSS    EPSS   %ile   KEV
   N   L   N   N   N   H   H   H    9.3   .0383   89.8   YES

AFFECTED
  Product  Versions     Fixed
  SL1      unspecified  —

TIMELINE
  Oct 4   Reserved by cisa-cg
  Oct 18  Published (CNA: cisa-cg)
  Oct 21  Added to CISA KEV, remediation due 2024-11-11

CNA: cisa-cg · CVSS v4.0 · 10 references · KEV due November 11, 2024

Description

ScienceLogic SL1 (formerly EM7) is affected by an unspecified vulnerability involving an unspecified third-party component packaged with SL1. The vulnerability is addressed in SL1 versions 12.1.3+, 12.2.3+, and 12.3+. Remediations have been made available for all SL1 versions back to version lines 10.1.x, 10.2.x, 11.1.x, 11.2.x, and 11.3.x.

Lifecycle

Complete event history — 3 events, chronological
Date	Event	Detail
October 4, 2024	Reserved	Reserved by cisa-cg
October 18, 2024	Published	Published (CNA: cisa-cg)
October 21, 2024	KEV ADDED	Added to CISA KEV, remediation due 2024-11-11

Affected

Affected products and packages — 1 row
Vendor	Product / Package	Ecosystem	Version introduced	Fixed
ScienceLogic	SL1	—	—	—

References (10)

https://arcticwolf.com/resources/blog/rackspace-breach-linked-to-zero-day-vulnerability-sciencelogic-sl1s-third-party-utility/ [third-party-advisory]
https://community.sciencelogic.com/blog/latest-kb-articles-and-known-issues-blog-board/week-of-september-30-2024---latest-kb-articles-and-known-issues-part-1-of-2/1690 [release-notes]
https://rackspace.service-now.com/system_status?id=detailed_status&service=4dafca5a87f41610568b206f8bbb35a6
https://support.sciencelogic.com/s/article/15465 [vendor-advisory]
https://support.sciencelogic.com/s/article/15527 [vendor-advisory]
https://twitter.com/ynezzor/status/1839931641172467907
https://www.bleepingcomputer.com/news/security/rackspace-monitoring-data-stolen-in-sciencelogic-zero-day-attack/ [media-coverage]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-9537 [government-resource]
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?search_api_fulltext=CVE-2024-9537 [government-resource]
https://www.theregister.com/2024/09/30/rackspace_zero_day_attack/ [media-coverage]

Authoritative record: CVE-2024-9537 at cve.org

Vendors: sciencelogic

About this page