CVE-2020-10148criticalunder attackCWE-288

CVE-2020-10148: critical vulnerability in SolarWinds Orion Platform

SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands

Published · Updated

Follow this CVE+ Monitor Orion Platform+ Monitor Orion

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.8epss 92%
from disclosure to weaponsame day
Published on NVDDec 29
1st PoCDec 29
CISA KEV+309d
Action required by CISAfederal deadline: 2022-05-03

Apply updates per vendor instructions.

In short

The SolarWinds Orion API allows attackers to bypass authentication and execute commands without proper credentials, potentially compromising the entire monitoring platform. This is a critical flaw because attackers can remotely gain control without needing valid login information.

Technical detail

CWE-288 authentication bypass in SolarWinds Orion API enables unauthenticated remote command execution through API endpoints. The vulnerability affects specific versions (2019.4 HF 5, 2020.2, 2020.2 HF 1) and requires network access to the API; successful exploitation results in full platform compromise and unauthorized administrative control.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The SolarWinds Orion API is vulnerable to an authentication bypass that could allow a remote attacker to execute API commands. This vulnerability could allow a remote attacker to bypass authentication and execute API commands which may result in a compromise of the SolarWinds instance. SolarWinds Orion Platform versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1 are affected.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SolarWinds · Orion Platform
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SolarWinds Orion Platform

In the same product, most dangerous first.

CVE-2020-27871HIGHCVE-2020-27871EPSS 90.8%CVE-2022-36958HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 81.9%CVE-2022-36961HIGHOrion Platform SQL Injection Privilege Escalation VulnerabilityEPSS 74.3%CVE-2021-35217HIGHInsecure Deserialization of untrusted data causing Remote code execution vulnerability.EPSS 72.8%CVE-2021-35215HIGHActionPluginBaseView Deserialization of Untrusted Data RCEEPSS 69.9%CVE-2022-38108HIGHSolarWinds Platform Deserialization of Untrusted DataEPSS 66.6%