CVE-2021-35215: SolarWinds Orion Platform ActionPluginBaseView Deserialization of Untrusted Data Remote Code Execution Vulnerability
Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the ActionPluginBaseView class. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-35215?
CVE-2021-35215 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform.
What is the severity of CVE-2021-35215?
The severity of CVE-2021-35215 is rated as high with a severity value of 8.8.
How does the CVE-2021-35215 vulnerability work?
The CVE-2021-35215 vulnerability exists within the ActionPluginBaseView class and is a result of the lack of proper validation of untrusted data, allowing remote code execution.
How can I exploit CVE-2021-35215?
To exploit CVE-2021-35215, an attacker would need to authenticate and send specially crafted data to the affected SolarWinds Orion Platform installation.
How can I fix CVE-2021-35215?
To fix CVE-2021-35215, it is recommended to update to SolarWinds Orion Platform version 2020.2.6 or higher, as it contains the necessary security patches.