What is CVE-2024-7608?

CVE-2024-7608 is a medium-severity vulnerability in Trellix Nx, Ex, Ax, Fx, Cms And Ivx, classified under Path Traversal: '.../...//'. CVSS score: 5.9/10. Published 2024-08-27.

How severe is CVE-2024-7608?

Medium severity. CVSS v3 base score is 5.9 out of 10.

Path Traversal in Trellix Nx, Ex, Ax, Fx, Cms And Ivx

CVE-2024-7608

An authenticated user can access the restricted files from NX, EX, FX, AX, IVX and CMS using path traversal.

EPSS: 0.003 (18.9th percentile) — read the EPSS interpretation.

CVSS v3 metric

CVSS v3 base score 5.9 (Medium). Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:H.

Affected products

Trellix Nx, Ex, Ax, Fx, Cms And Ivx — versions Trellix NX, EX, AX, FX, CMS 10.0.1 and older, for Trellix IVX 10.02. and older

Weakness classification (CWE)

CWE-35 — Path Traversal: '.../...//'

References

trellixpsirt@trellix.com

Frequently asked questions

What is CVE-2024-7608?: CVE-2024-7608 is a medium-severity vulnerability in Trellix Nx, Ex, Ax, Fx, Cms And Ivx, classified under Path Traversal: '.../...//'. CVSS score: 5.9/10. Published 2024-08-27.
How severe is CVE-2024-7608?: Medium severity. CVSS v3 base score is 5.9 out of 10.