SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
100Vexday Risk Score
Patch now. It exploitation observed by VulnCheck and has a working public exploit.
ssvc Actcvss 8.8epss 92%
from disclosure to weapon683 days
Published on NVDMar 1
1st PoC+683d
VulnCheck+481d
exploitation probability
92%top 1% of all CVEs
observed exploitation
yesVulnCheck
1 public exploit(s)
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Affected products
SolarWinds · Security Event Managerpublic PoCs found — 1
vulncheckvulncheck.com/xdb/b42652c21efaunverified⚠ Public resources, to assess the exposure of systems you control or are authorized to test. Test only with authorization.