SolarWinds Information Service (SWIS) Remote Command Execution

This module requires Metasploit: https://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework require 'rex/proto/amqp/version091' class MetasploitModule 'SolarWinds Information Service SWIS .NET Deserialization From AMQP RCE', 'Description' = %q The SolarWinds...

CVE-2022-38108

creationtimestamp| type| source ---|---|--- 2022-10-21 09:13:37+00:00| seen| https://t.me/cibsecurity/51906 2023-03-02 11:02:01+00:00| published-proof-of-concept| https://t.me/CyberSecurityTechnologies/7849 2023-03-29 14:49:46+00:00| seen|...

CVE-2022-38108

The CVE-2022-38108 issue affects SolarWinds Platform, specifically the SWIS component. It is a deserialization vulnerability in SWIS that can lead to OS command execution when a crafted AMQP message is processed; an attacker must authenticate to the AMQP service with SolarWinds access (e.g., an O...

SolarWinds Information Service (SWIS) .NET Deserialization From AMQP RCE

The SolarWinds Information Service SWIS is vulnerable to RCE by way of a crafted message received through the AMQP message queue. A malicious user that can authenticate to the AMQP service can publish such a crafted message whose body is a serialized .NET object which can lead to OS command...