CVE-2022-36958

Опубликовано: 20 окт. 2022

Источник: nvd

CVSS3: 8.8

EPSS Средний

Описание

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with valid access to SolarWinds Web Console to execute arbitrary commands.

Ссылки

https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36958
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-CAN-17567
Third Party Advisory
VDB Entry
https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-36958
Vendor Advisory
https://www.zerodayinitiative.com/advisories/ZDI-CAN-17567
Third Party Advisory
VDB Entry

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:solarwinds:orion_platform:*:*:*:*:*:*:*:*

Версия до 2020.2.6 (исключая)

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:-:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix1:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix2:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix3:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix4:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2020.2.6:hotfix5:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2022.2:*:*:*:*:*:*:*

cpe:2.3:a:solarwinds:orion_platform:2022.3:*:*:*:*:*:*:*

EPSS

Процентиль: 94%

0.14799

Средний

8.8 High

CVSS3

Дефекты

CWE-502

Связанные уязвимости

GHSA-3p56-mxjf-mfgp