by Kastro
Paper/Archive/CVE-2024-28075

CVE-2024-28075

SolarWinds Access Rights Manager — SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution

EPSS 78%CVSS 9.0
critical.is priorityof 100
47
CVSS 9.0 (CNA)9.0 / 10 × 3027.0Not in CISA KEV+300.0EPSS percentile 99.6.996 × 2019.9No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

Affected

ProductAffectedFixed inSource
Access Rights Managerprevious versions – 2023.2.3–CNA
access_rights_manager< 2023.2.42023.2.4CISA-ADP

Scores by source

SolarWinds (CNA)9.0CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

refsolarwinds.com/trust-center/security-advisories/CVE-2024-28075refdocumentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-4_release_notes.htmrefdocumentation.solarwinds.com/en/success_center/arm/content/secure-your-arm-deployment.htm