VYPR
← All advisories
Medium severity5.5NVD Advisory· Published Oct 4, 2023· Updated Jun 17, 2026

CVE-2023-3665

CVE-2023-3665

Description

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

Affected products

3
  • Trellix/Endpoint Securitycpe-rescue2 versions
    10.7.0+ 1 more
    • (no CPE)range: 10.7.0
    • cpe:2.3:a:trellix:endpoint_security:*:*:*:*:*:*:*:*range: <=10.7.0
  • Trellix/ENS HXllm-fuzzy
    Range: <=10.7.0 April 2023 release

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.