CVE-2023-3665

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

Score

CVSS 3.1 7.8 High

Status

Modified - trellixpsirt@trellix.com

Published

2023-10-04

Last modified

2024-09-19

Weaknesses

CWE-74, CWE-94

Affected products

• Endpoint Security (Trellix)
• Trellix Endpoint Security (Trellix)

References

• https://kcm.trellix.com/corporate/index?page=content&id=SB10405