CVE-2023-33224
7.2
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| SolarWinds | SolarWinds Platform | 0 < 2023.3 | affected |
Weaknesses
- CWE-696: CWE-696: Incorrect Behavior Order
ADP Enrichment
CVE Program Container
Additional References
- https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
References
- https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33224
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.