← CVE Intelligence

CVE-2023-3665

Trellix / Trellix Endpoint Security PUBLISHED

Description (CNA)

A code injection vulnerability in Trellix ENS 10.7.0 April 2023 release and earlier, allowed a local user to disable the ENS AMSI component via environment variables, leading to denial of service and or the execution of arbitrary code.

Affected (CNA)

Vendor / productVersions
Trellix / Trellix Endpoint Securityaffected 10.7.0

CWE

CWE-74

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.