CVE-2024-5671

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

Insecure Deserialization in some workflows of the IPS Manager allows unauthenticated remote attackers to perform arbitrary code execution and access to the vulnerable Trellix IPS Manager.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-502

Affected software

No affected versions have been published.

Timeline

Published
Jun 14, 2024
Last modified
Jun 17, 2026
NVD status
Deferred

Related CVEs from 2024

CVE-2024-567105.5In the Linux kernel, the following vulnerability has been resolved: ceph: fix memory leak in ceph_direct_read_write() The bvecs array whicCVE-2024-567115.5In the Linux kernel, the following vulnerability has been resolved: drm/panel: himax-hx83102: Add a check to prevent NULL pointer dereferenCVE-2024-567125.5In the Linux kernel, the following vulnerability has been resolved: udmabuf: fix memory leak on last export_udmabuf() error path In exportCVE-2024-567135.5In the Linux kernel, the following vulnerability has been resolved: net: netdevsim: fix nsim_pp_hold_write() nsim_pp_hold_write() has two CVE-2024-567145.5In the Linux kernel, the following vulnerability has been resolved: ionic: no double destroy workqueue There are some FW error handling paCVE-2024-567155.5In the Linux kernel, the following vulnerability has been resolved: ionic: Fix netdev notifier unregister on failure If register_netdev() CVE-2024-567165.5In the Linux kernel, the following vulnerability has been resolved: netdevsim: prevent bad user input in nsim_dev_health_break_write() If CVE-2024-567175.5In the Linux kernel, the following vulnerability has been resolved: net: mscc: ocelot: fix incorrect IFH SRC_PORT field in ocelot_ifh_set_bCVE-2024-567185.5In the Linux kernel, the following vulnerability has been resolved: net/smc: protect link down work from execute after lgr freed link downCVE-2024-567195.5In the Linux kernel, the following vulnerability has been resolved: net: stmmac: fix TSO DMA API usage causing oops Commit 66600fac7a98 ("CVE-2024-56727.2A high privileged remote attacker can execute arbitrary system commands via GET requests due to improper neutralization of special elements CVE-2024-567205.5In the Linux kernel, the following vulnerability has been resolved: bpf, sockmap: Several fixes to bpf_msg_pop_data Several fixes to bpf_m
CVE-2024-5671: Critical severity, CVSS 9.8 | Vulnix