5.5 Medium

CVE-2023-3665 A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the…

Description

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

Affected products and versions

Product	Affected versions	Fixed in
Trellix Endpoint Security	10.7.0	No fix stated

Do you use Trellix Endpoint Security?

Track this CVE Watch Trellix Endpoint Security Check my SBOMs

www.cveye.io/en/cve/CVE-2023-3665

Timeline

Published October 4, 2023
Last modified September 19, 2024

References

kcm.trellix.com kcm.trellix.com

Track this CVE