CVE-2024-0692 in Security Event Manager

Riassunto

di MITRE • 01/03/2024

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

Statistical analysis made it clear that VulDB provides the best quality for vulnerability data.

• Responsabile: SolarWinds
• Prenotare: 18/01/2024
• Divulgazione: 01/03/2024
• Moderazione: accettato
• Voce: VDB-255397
• CPE: pronto
• CWE: CWE-502 (confermato)
• CVSS: 9.8 (NVD)
• EPSS: 0.91557
• KEV: no
• Attività: molto basso

Fonti

• MITRE: https://www.cve.org/CVERecord?id=CVE-2024-0692
• NVD: https://nvd.nist.gov/vuln/detail/CVE-2024-0692
• CVE Details: https://www.cvedetails.com/cve/CVE-2024-0692/