CVE-2024-28991 — Vulnetix

CVE-2024-28991 PUBLISHED CVSS 9 CRITICAL

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.

EPSS 30.90% · 96.8th percentile

Risk Scores

CVSS 3.1

CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

EPSS Score

30.90%

96.8th percentile

Affected Products

Vendor	Product	Versions
solarwinds	access_rights_manager	0, 0
solarwinds	access_rights_manager	0, 0, 0
SolarWinds	Access Rights Manager	previous versions, previous versions

Timeline

Sep 12, 2024 CVE Published
Sep 12, 2024 PoC Published
Sep 13, 2024 EPSS Score
Sep 14, 2024 PoC Published
Sep 16, 2024 PoC Published
Sep 16, 2024 PoC Published
Sep 16, 2024 PoC Published
Sep 17, 2024 CVE Updated
Sep 17, 2024 PoC Published
Sep 17, 2024 PoC Published
Sep 17, 2024 PoC Published
Sep 17, 2024 PoC Published

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28991 url
https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2024-3-1_release_notes.htm url
https://nvd.nist.gov/vuln/detail/CVE-2024-28991 advisory

Open in Interactive Console →