Lucene search
PRIOn knowledge basePRION:CVE-2019-8917HistoryFeb 18, 2019 - 7:29 p.m.
Remote code execution
2019-02-1819:29:00
PRIOn knowledge base
www.prio-n.com
2
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.
| CPE | Name | Operator | Version |
|---|---|---|---|
| orion_network_performance_monitor | lt | 12.4 |
Related
nvd
nvd
CVE-2019-8917
2019-02-18 19:29:00
cve
cve
CVE-2019-8917
2019-02-18 19:29:00
cvelist
cvelist
CVE-2019-8917
2019-02-18 19:00:00
checkpoint_advisories
checkpoint_advisories
SolarWinds Orion NPM OrionModuleEngine Remote Code Execution (CVE-2019-8917)
2019-11-20 00:00:00