CVE-2022-36957

Published: Oct 20, 2022Modified: Nov 21, 2024

7.2

Vector

CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitability: 1.2 / Impact: 5.9

Source: NVD

Description

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Affected (9)

Products: Solarwinds: Orion Platform

Solarwinds

1 product

Orion Platform

Configuration A

9 vulnerable

Vulnerable Software	Affected Versions
Solarwinds Orion Platform	Before 2020.2.6
Solarwinds Orion Platform	Version 2020.2.6
Solarwinds Orion Platform	Version 2020.2.6 hotfix1
Solarwinds Orion Platform	Version 2020.2.6 hotfix2
Solarwinds Orion Platform	Version 2020.2.6 hotfix3
Solarwinds Orion Platform	Version 2020.2.6 hotfix4
Solarwinds Orion Platform	Version 2020.2.6 hotfix5
Solarwinds Orion Platform	Version 2022.2
Solarwinds Orion Platform	Version 2022.3