9.6
CVE-2024-23469
- EPSS 17.87%
- Veröffentlicht 17.07.2024 15:15:11
- Zuletzt bearbeitet 21.11.2024 08:57:46
- Quelle psirt@solarwinds.com
- CVE-Watchlists
- Unerledigt
LoginSolarWinds Access Rights Manager Exposed Dangerous Method Remote Code Execution Vulnerability
SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability. If exploited, this vulnerability allows an unauthenticated user to perform the actions with SYSTEM privileges.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Solarwinds ≫ Access Rights Manager Version <= 2023.2.4
| Typ | Quelle | Score | Percentile |
|---|---|---|---|
| EPSS | FIRST.org | 17.87% | 0.968 |
| Quelle | Base Score | Exploit Score | Impact Score | Vector String |
|---|---|---|---|---|
| nvd@nist.gov | 8.8 | 2.8 | 5.9 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
|
| psirt@solarwinds.com | 9.6 | 2.8 | 6 |
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
|
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3_release_notes.htm