Lucene search
SolarWindsCVELIST:CVE-2023-35182HistoryOct 19, 2023 - 2:23 p.m.
CVE-2023-35182 SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
2023-10-1914:23:31
CWE-502
SolarWinds
www.cve.org
1
solarwinds
access rights manager
remote code execution
vulnerability
unauthenticated users
arm server
deserialization of untrusted data
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.9 High
AI Score
Confidence
High
0.034 Low
EPSS
Percentile
91.5%
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.
CNA Affected
[
{
"defaultStatus": "unaffected",
"product": "Access Rights Manager",
"vendor": "SolarWinds",
"versions": [
{
"lessThanOrEqual": "2023.2.0.73",
"status": "affected",
"version": "previous versions",
"versionType": "2023.2"
}
]
}
]Related
cve
cve
CVE-2023-35182
2023-10-19 15:15:09
zdi
zdi
nvd
nvd
CVE-2023-35182
2023-10-19 15:15:09
prion
prion
Remote code execution
2023-10-19 15:15:00
thn
thn
Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities
2023-10-25 04:47:00
8.8 High
CVSS3
Attack Vector
ADJACENT
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
9.9 High
AI Score
Confidence
High
0.034 Low
EPSS
Percentile
91.5%
Related for CVELIST:CVE-2023-35182