Vulnerability Details CVE-2023-23842
The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.003
EPSS Ranking 52.7%
CVSS Severity
CVSS v3 Score 7.2
References
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23842
- https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23842
Products affected by CVE-2023-23842
-
cpe:2.3:a:solarwinds:network_configuration_monitor:*