Lucene search
PRIOn knowledge basePRION:CVE-2021-35217HistorySep 08, 2021 - 2:15 p.m.
Remote code execution
2021-09-0814:15:00
PRIOn knowledge base
www.prio-n.com
2
Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data.
| CPE | Name | Operator | Version |
|---|---|---|---|
| patch_manager | le | 2020.2.5 |
References
documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm
documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm
www.solarwinds.com/trust-center/security-advisories/cve-2021-35217
www.zerodayinitiative.com/advisories/ZDI-21-1247/
Related
zdi
zdi
nvd
nvd
CVE-2021-35217
2021-09-08 14:15:12
cvelist
cvelist
cve
cve
CVE-2021-35217
2021-09-08 14:15:12