CVE-2023-40062 | THREATINT

Assigner	SolarWinds
Reserved	2023-08-08
Published	2023-11-01
Updated	2024-09-05

Description

SolarWinds Platform Incomplete List of Disallowed Inputs Remote Code Execution Vulnerability. If executed, this vulnerability would allow a low-privileged user to execute commands with SYSTEM privileges.

HIGH: 8.0

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Problem types

CWE-20 Improper Input Validation

Product status

Default status

0x4002c366f0

2023.3.1 and previous versions

affected

Credits

Piotr Bazydlo (@chudypb) of Trend Micro Zero Day Initiative 0x4002c36720

References

https://documentation.solarwinds.com/en/success_center/hco/content/release_notes/hco_2023-4_release_notes.htm

https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-40062

cve.org CVE-2023-40062

nvd.nist.gov CVE-2023-40062

Download JSON

https://cve.threatint.com/CVE/CVE-2023-40062

Subscribe to our newsletter to learn more about our work.