CVE-2024-28991criticalCWE-502

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

28Vexday Risk Score

Sin señal de explotación. Ningún artefacto público de explotación conocido hasta ahora.

ssvc Trackcvss 9epss 3.1%

probabilidad de explotación

3.1%top 13% de las CVE

explotación observada

noninguna fuente lo reporta

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Productos afectados

SolarWinds · Access Rights Manager

Referencias

https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3-1_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28991