Description
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| SolarWinds | SolarWinds Platform | 2022.4.1 and prior versions – ≤ 2022.4.1 | — |
Advisories 1
- WID-SEC-2023-0392 SolarWinds Orion: Mehrere Schwachstellen ermöglichen Codeausführung BSI CERT-Bund (WID) · Feb 14, 2023