Command injection

2023-04-2120:15:00

PRIOn knowledge base

www.prio-n.com

solarwinds

command injection

vulnerability

remote adversary

arbitrary commands

7.4 High

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

44.8%

JSON

The SolarWinds Platform was susceptible to the Command Injection Vulnerability. This vulnerability allows a remote adversary with a valid SolarWinds Platform admin account to execute arbitrary commands.

CPENameOperatorVersion
orion_platformlt2023.2

CPE	Name	Operator	Version
	orion_platform	lt	2023.2

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-2_release_notes.htm

www.solarwinds.com/trust-center/security-advisories/cve-2022-36963