CVE-2023-23842highCWE-22

SolarWinds Network Configuration Manager Directory Traversal Vulnerability

21Vexday Risk Score

Sem sinal de exploração. Nenhum artefato público de exploração conhecido até agora.

ssvc Trackcvss 7.2epss 3.2%

probabilidade de exploração

3.2%top 12% das CVEs

exploração observada

nãonenhuma fonte reporta

The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

SolarWinds · Network Configuration Manager

Referências

https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-3_release_notes.htm https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23842