CVE-2023-40057

EPSS 4.2%
Veröffentlicht 15.02.2024 21:15:08
Zuletzt bearbeitet 21.11.2024 08:18:37
Quelle psirt@solarwinds.com
CVE-Watchlists
Login
Unerledigt
Login

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Betroffene Produkte Warnungen 0 Metriken 2 CWE 1 Referenzen 4

NVD 1 VulnDex Vulnerability Enrichment 0

Daten sind bereitgestellt durch National Vulnerability Database (NVD)

Solarwinds ≫ Access Rights Manager Version < 2023.2.2

Zu dieser CVE wurde keine Warnung gefunden.

EPSS Metriken
Typ	Quelle	Score	Percentile
EPSS	FIRST.org	4.2%	0.897

CVSS Metriken
Quelle	Base Score	Exploit Score	Impact Score	Vector String
psirt@solarwinds.com	9	2.3	6	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE-502 Deserialization of Untrusted Data

The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40057

Patch

Vendor Advisory

https://nvd.nist.gov/vuln/detail/CVE-2023-40057

CVE Source (NVD)

https://cveawg.mitre.org/api/cve/CVE-2023-40057

CVE Source (JSON)

https://euvd.enisa.europa.eu/vulnerability/CVE-2023-40057

EUVD

Team-orientierte Vulnerability Management Plattform

Features der Plattform

CVE-2023-40057