Lucene search

4108CF62-7630-555C-8660-0F89BC787A03

HistoryOct 23, 2021 - 1:35 a.m.

Exploit for Deserialization of Untrusted Data in Solarwinds Orion Platform

2021-10-2301:35:42

150

solarwinds

orion

platform

deserialization

untrusted data

cve-2021-35215

remote code execution

authentication

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.549

Percentile

97.7%

JSON

CVE-2021-35215

SolarWinds Orion Platform ActionPluginBaseView …

This is an article that belongs to githubexploit private collection.
Please sign in to get more Information.

CVSS2

Attack Vector

NETWORK

Attack Complexity

LOW

Authentication

NONE

Confidentiality Impact

COMPLETE

Integrity Impact

COMPLETE

Availability Impact

COMPLETE

AV:N/AC:L/Au:N/C:C/I:C/A:C

CVSS3

9.8

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

AI Score

8.9

Confidence

High

EPSS

0.549

Percentile

97.7%

JSON

Related for 4108CF62-7630-555C-8660-0F89BC787A03