ActionPluginBaseView Deserialization of Untrusted Data RCE
33Vexday Risk Score
Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.
ssvc Trackcvss 8.9epss 70%
probabilidad de explotación
70%top 1% de las CVE
explotación observada
noninguna fuente lo reporta
Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
Productos afectados
SolarWinds · Orion PlatformReferencias
https://documentation.solarwinds.co/enm/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htmhttps://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmhttps://www.solarwinds.com/trust-center/security-advisories/cve-2021-35215https://www.zerodayinitiative.com/advisories/ZDI-21-1245/