CVE-2023-23842CWE-22

SolarWinds Network Configuration Manager Directory Traversal Vulnerability

High · published July 26, 2023

CVSS v3.1
7.2
EPSS
3%
Percentile
88.2
In the wild
Unconfirmed
What it is

The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

The record
Technical detail
CVSS v3.1
7.2 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.03248 · 88.2th percentile
Weakness
CWE-22 · Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Published
2023-07-26T14:53Z
EPSS history
Timeline
  • 26 JUL 14:53Z
    SolarWinds Network Configuration Manager Directory Traversal Vulnerability
    cvelistv5