CVE-2021-35218: SolarWinds Patch Manager Chart Endpoint Deserialization of Untrusted Data Remote Code Execution Vulnerability
Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Patch Manager. Although authentication is required to exploit this vulnerability, the existing authentication mechanism can be bypassed. The specific flaw exists within the Chart endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-35218?
CVE-2021-35218 is a vulnerability that allows remote attackers to execute arbitrary code on affected installations of SolarWinds Patch Manager.
How does CVE-2021-35218 work?
CVE-2021-35218 can be exploited by bypassing the existing authentication mechanism and exploiting a flaw in the Chart endpoint of SolarWinds Patch Manager to execute arbitrary code.
What is the severity of CVE-2021-35218?
CVE-2021-35218 has a severity rating of 8.8 (High).
Which software installations are affected by CVE-2021-35218?
CVE-2021-35218 affects installations of SolarWinds Patch Manager up to version 2020.2.6, as well as SolarWinds Orion Platform.
How can CVE-2021-35218 be mitigated?
To mitigate CVE-2021-35218, it is recommended to apply the necessary patches provided by SolarWinds and follow the security advisories.