Vulnerability Details CVE-2017-5199
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.03
EPSS Ranking 86.0%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 6.5
References
Products affected by CVE-2017-5199
-
cpe:2.3:a:solarwinds:log_and_event_manager:6.1
-
cpe:2.3:a:solarwinds:log_and_event_manager:6.2
-
cpe:2.3:a:solarwinds:log_and_event_manager:6.2.1
-
cpe:2.3:a:solarwinds:log_and_event_manager:6.3.0
-
cpe:2.3:a:solarwinds:log_and_event_manager:6.3.1