CVE-2021-35215

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView Deserialization RCE, requires login. PoC POST /Orion/RenderControl.aspx HTTP/1.1 Host: 192.168.137.130:8787 Content-Length: 3648 Cache-Control: max-age=0 Origin: http://192.168.137.130:8787 Upgrade-Insecure-Requests: 1 DNT: 1...

SolarWinds Orion Platform ActionPluginBaseView Code Execution

The vulnerability of the ActionPluginBaseView component in SolarWinds Orion Platform’s network monitoring software lies in the ability to restore unreliable data in memory. Exploiting this vulnerability allows a remote attacker to execute arbitrary code...

SolarWinds Orion Platform ActionPluginBaseView Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the ActionPluginBaseView class. The issue results from the lack of proper validati...

Exploit for Deserialization of Untrusted Data in Solarwinds Orion_Platform

CVE-2021-35215 SolarWinds Orion Platform ActionPluginBaseView...

PT-2021-5143

Name of the Vulnerable Software and Affected Versions SolarWinds Orion Platform version 2020.2.5 Description Insecure deserialization in the Orion Platform leads to Remote Code Execution. This issue is related to the deserialization of untrusted data in the ActionPluginBaseView component, allowin...