CVE-2021-35244: SolarWinds Orion Platform Unrestricted File Upload Remote Code Execution Vulnerability
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
Other sources
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability. The specific flaw exists within the handling of alert creation. The issue results from the lack of proper validation of user-supplied data, which can allow the upload of arbitrary files. An attacker can leverage this vulnerability to execute code in the context of SYSTEM.
— ZDI
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2021-35244?
CVE-2021-35244 is a vulnerability that allows remote attackers to execute arbitrary code on SolarWinds Orion Platform.
Is authentication required to exploit CVE-2021-35244?
Yes, authentication is required to exploit CVE-2021-35244.
How severe is CVE-2021-35244?
CVE-2021-35244 has a severity value of 8.8 (high).
Which software versions are affected by CVE-2021-35244?
SolarWinds Orion Platform versions up to 2020.2.6 and hotfixes 2020.2.6-hotfix1 and 2020.2.6-hotfix2 are affected by CVE-2021-35244.
How can I fix CVE-2021-35244?
To fix CVE-2021-35244, apply the necessary patches and updates provided by SolarWinds.