CVE-2024-28987criticalunder attackCWE-798

CVE-2024-28987: critical vulnerability in SolarWinds Web Help Desk

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

Published · Updated

Follow this CVE+ Monitor Web Help Desk

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

100Vexday Risk Score

Patch now. It under exploitation confirmed by CISA and has a working public exploit.

ssvc Actcvss 9.1epss 93%
from disclosure to weapon15 days
Published on NVDAug 21
1st PoC+15d
metasploit+1d
CISA KEV+55d
Action required by CISAfederal deadline: 2024-11-05

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

In short

SolarWinds Web Help Desk contains hardcoded login credentials embedded in the software, allowing anyone on the internet to gain unauthorized access and modify internal data without authentication.

Technical detail

CWE-798 hardcoded credential vulnerability in SolarWinds WHD enables unauthenticated remote access to internal functionality via fixed credentials. An attacker can bypass authentication mechanisms and manipulate system data without prior authorization or user interaction.

Summary generated and translated by AI from the official description.

The full analysis of this CVE is available in Portuguese →

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
Affected products
SolarWinds · Web Help Desk
⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.
Related CVEs — SolarWinds Web Help Desk

In the same product, most dangerous first.

CVE-2025-26399CRITICALSolarWinds Web Help Desk Deserialization of Untrusted Data Privilege Escalation VulnerabilityEPSS 90.6%KEVCVE-2024-28986CRITICALSolarWinds Web Help Desk Java Deserialization Remote Code Execution VulnerabilityEPSS 84.6%KEVCVE-2025-40551CRITICALSolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 84.2%KEVCVE-2025-40536HIGHSolarWinds Web Help Desk Security Control Bypass VulnerabilityEPSS 73.6%KEVCVE-2025-40553CRITICALSolarWinds Web Help Desk Deserialization of Untrusted Data Remote Code Execution VulnerabilityEPSS 68.0%CVE-2025-40554CRITICALSolarWinds Web Help Desk Authentication Bypass VulnerabilityEPSS 60.6%