Vulnerability Details CVE-2023-23844
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 43.6%
CVSS Severity
CVSS v3 Score 7.2
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23844
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2023-23844
Products affected by CVE-2023-23844
-
cpe:2.3:a:solarwinds:solarwinds_platform:-
-
cpe:2.3:a:solarwinds:solarwinds_platform:2022.2.0
-
cpe:2.3:a:solarwinds:solarwinds_platform:2022.3.0
-
cpe:2.3:a:solarwinds:solarwinds_platform:2022.4.0
-
cpe:2.3:a:solarwinds:solarwinds_platform:2023.1.0
-
cpe:2.3:a:solarwinds:solarwinds_platform:2023.2.0