CVE-2023-33226 | THREATINT

Assigner	SolarWinds
Reserved	2023-05-18
Published	2023-11-01
Updated	2024-09-05

Description

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.

HIGH: 8.0

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

Product status

Default status

0x4003623200

2023.3.1 and previous versions

affected

Credits

Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative 0x4003623230

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33226

https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htm

cve.org CVE-2023-33226

nvd.nist.gov CVE-2023-33226

Download JSON

https://cve.threatint.com/CVE/CVE-2023-33226

Subscribe to our newsletter to learn more about our work.