Skip to content
OpenAdvisories
Critical · 9.0 CVE-2023-40057 EUVD-2023-44664GHSA-7fc3-82cp-v5p4

SolarWinds Access Rights Manager (ARM) Deserialization of Untrusted Data Remote Code Execution

Published Feb 15, 2024 · Updated Aug 12, 2024 · Assigned by SolarWinds

Description

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Affected products

VendorProductAffectedFixed
SolarWinds Access Rights Manager previous versions – ≤ 2023.2.2 —

References