CVE-2021-31474

🗓️ 21 May 2021 00:00:00Reported by AttackerKBType

This vulnerability in SolarWinds Network Performance Monitor 2020.2.1 allows remote code execution without authentication, due to lack of validation in the SolarWinds.Serialization library, potentially leading to system compromise

Reporter	Title	Published	Views	Family All 8
NVD	CVE-2021-31474	21 May 202115:15	–	nvd
Zero Day Initiative	SolarWinds Network Performance Monitor FromJson Deserialization of Untrusted Data Remote Code Execution Vulnerability	20 Sep 202100:00	–	zdi
Cvelist	CVE-2021-31474	21 May 202114:40	–	cvelist
seebug.org	SolarWinds Orion 远程代码执行漏洞（CVE-2021-31474）	26 May 202100:00	–	seebug
Prion	Deserialization of untrusted data	21 May 202115:15	–	prion
CVE	CVE-2021-31474	21 May 202115:15	–	cve
RedhatCVE	CVE-2021-31474	6 Feb 202504:27	–	redhatcve
GithubExploit	Exploit for Deserialization of Untrusted Data in Solarwinds Orion Platform	23 Oct 202101:35	–	githubexploit

Source	Link
cve	www.cve.mitre.org/cgi-bin/cvename.cgi
zerodayinitiative	www.zerodayinitiative.com/advisories/ZDI-21-602/
documentation	www.documentation.solarwinds.com/en/success_center/sam/content/release_notes/sam_2020-2-5_release_notes.htm

Transform Your Security Services

Elevate your offerings with Vulners' advanced Vulnerability Intelligence. Contact us for a demo and discover the difference comprehensive, actionable intelligence can make in your security strategy.

Book a live demo