CVE-2023-33227 Directory Traversal Remote Code Execution Vulnerability

2023-11-0115:31:27

CWE-22

SolarWinds

www.cve.org

cve-2023-33227

remote code execution

low level user privileges

CVSS3

Attack Vector

ADJACENT

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

HIGH

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

AI Score

9.1

Confidence

High

EPSS

0.008

Percentile

81.7%

JSON

The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.

CNA Affected

[
  {
    "defaultStatus": "unaffected",
    "product": "Network Configuration Manager",
    "vendor": "SolarWinds ",
    "versions": [
      {
        "status": "affected",
        "version": "2023.3.1 and previous versions "
      }
    ]
  }
]