42 matches found
CVE-2017-7646
SolarWinds Log & Event Manager (LEM) prior to 6.3.1 Hotfix 4 allows an authenticated user to browse the server filesystem and read arbitrary files. Risk details are not expanded beyond this description in the provided documents. Remediation: upgrade to 6.3.1 Hotfix 4 or newer where indicated.
SolarWind LEM Default SSH Password Remote Code Execution
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module exploits the default credentials of SolarWind LEM. A men...
SolarWinds LEM 6.3.1 - Remote Code Execution Exploit
Exploit for linux platform in category remote exploits This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module...
SolarWind LEM Default SSH Password Remote Code Execution Exploit
This module exploits the default credentials of SolarWind LEM. A menu system is encountered when the SSH service is accessed with the default username and password which is "cmc" and "password". By exploiting a vulnerability that exist on the menuing script, an attacker can escape from restricted...
CVE-2017-5199
The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...
Design/Logic Flaw
SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...
CVE-2017-5198
SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...
CVE-2017-5198
SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...
Design/Logic Flaw
The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...
CVE-2017-5198
SolarWinds LEM aka SIEM before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh...
CVE-2017-5199
The editbanner feature in SolarWinds LEM aka SIEM through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl...
CVE-2017-5198
SolarWinds LEM (SIEM) prior to version 6.3.1 contains a misconfigured sudo setup that lets local attackers obtain root by editing /usr/local/contego/scripts/hostname.sh. This item is confirmed by multiple sources in the connected data. Affected product/version: SolarWinds LEM before 6.3.1. Root/P...
CVE-2017-5199
CVE-2017-5199 affects SolarWinds Log and Event Manager (LEM) up to version 6.3.1. The vulnerability enables an authenticated remote attacker to execute arbitrary code by editing the file /usr/local/contego/scripts/mgrconfig.pl via the editbanner feature. The NVD entry notes a CVSS2 base score of ...
SolarWinds LEM Default SSH Password Remote Code Execution
This module exploits the default credentials of SolarWinds LEM. A menu system is encountered when the SSH service is accessed with the default username and password which is "cmc" and "password". By exploiting a vulnerability that exist on the menuing script, an attacker can escape from restricte...
SolarWinds LEM 6.3.1 - Remote Code Execution (Metasploit)
SolarWinds LEM 6.3.1 - Remote Code Execution Metasploit This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module...
SolarWinds LEM 6.3.1 - Remote Code Execution (Metasploit)
This module requires Metasploit: http://metasploit.com/download Current source: https://github.com/rapid7/metasploit-framework class MetasploitModule "SolarWind LEM Default SSH Password Remote Code Execution", 'Description' = %q This module exploits the default credentials of SolarWind LEM. A men...
SolarWinds Log and Event Manager XML External Entity Injection Vulnerability
SolarWinds Log and Event Manager LEM is vulnerable to an Extensible Markup Language XML external entity injection SPDX-FileCopyrightText: 2015 Greenbone AG Some text descriptions might be excerpted from a referenced sources, and are Copyright C by the respective right holders...
Design/Logic Flaw
SolarWinds Log and Event Manager LEM allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality...
CVE-2015-7839
CVE-2015-7839 affects SolarWinds Log and Event Manager (LEM). The vulnerability allows an unauthenticated, remote attacker to execute arbitrary commands on managed hosts via a request to the nonsecurestreamingamf endpoint under services/messagebroker, leveraging the traceroute functionality. Mult...