Lucene search
HistoryOct 03, 2022 - 4:15 p.m.
CVE-2015-7839
solarwinds
log and event manager
lem
cve-2015-7839
remote code execution
nonsecurestreamingamf
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.
Affected configurations
Node
solarwindslog_and_event_manager
| CPE | Name | Operator | Version |
|---|---|---|---|
| solarwinds:log_and_event_manager | solarwinds log and event manager | eq | * |
Related
nvd
nvd
CVE-2015-7839
2015-10-15 20:59:10
zdi
zdi
prion
prion
Design/Logic Flaw
2015-10-15 20:59:00
cvelist
cvelist
CVE-2015-7839
2022-10-03 16:15:55
nessus
nessus
openvas
openvas
SolarWinds Log and Event Manager Command Injection Vulnerability
2015-11-13 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.8 High
AI Score
Confidence
Low
0.011 Low
EPSS
Percentile
84.3%
Related for CVE-2015-7839