Trellix Network Security NX, EX, FX, AX, and CMS vulnerability

What happened

A Code Injection vulnerability existed in Trellix Network Security CM and NX. A locally authenticated admin user can execute arbitrary code using the web interface and Alert artifact details.

Affected versions

Trellix Network Security NX, EX, FX, AX, and CMS: 10.0.4 Fixed: See vendor advisory.

Why it matters

Review the vendor advisory and exposure of the affected product to determine operational impact.

Detection & mitigation

• Apply vendor-provided updates or mitigations.
• Review affected product exposure and access logs.