4 matches found
Deserialization of untrusted data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...
CVE-2021-31474
CVE-2021-31474 affects SolarWinds Network Performance Monitor 2020.2.1. The vulnerability stems from improper validation in the SolarWinds.Serialization library, enabling deserialization of untrusted data and remote code execution with SYSTEM privileges. Public sources in the connected data inclu...
PT-2021-19355
Name of the Vulnerable Software and Affected Versions SolarWinds Network Performance Monitor version 2020.2.1 Description This issue allows remote attackers to execute arbitrary code on affected installations. Authentication is not required to exploit this issue. The specific flaw exists within t...
CVE-2021-31474: Deserialization of Untrusted Data
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor 2020.2.1. Authentication is not required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Serialization library. The issue results...