CVE-2022-36962: SolarWinds Platform Command Injection
Published Nov 29, 2022
·Updated
SolarWinds Platform was susceptible to Command Injection. This vulnerability allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.
Affected Software
9 affected components
SolarWinds Orion Platform<2020.2.6
SolarWinds Orion Platform=2020.2.6
SolarWinds Orion Platform=2020.2.6-hotfix1
SolarWinds Orion Platform=2020.2.6-hotfix2
SolarWinds Orion Platform=2020.2.6-hotfix3
SolarWinds Orion Platform=2020.2.6-hotfix4
SolarWinds Orion Platform=2020.2.6-hotfix5
SolarWinds Orion Platform=2022.2
SolarWinds Orion Platform=2022.3
Remediation
Information
All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2022.4
Event History
Nov 29, 2022
CVE Published
via MITRE·08:46 PM
Data Sourced
via MITRE·08:46 PM
RemedyDescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2022-36962?
CVE-2022-36962 is a vulnerability in the SolarWinds Platform that allows a remote adversary with complete control over the SolarWinds database to execute arbitrary commands.
2
How does CVE-2022-36962 affect the SolarWinds Orion Platform?
CVE-2022-36962 affects the SolarWinds Orion Platform versions 2020.2.6 and later.
3
How severe is CVE-2022-36962?
CVE-2022-36962 has a severity rating of 7.2 (High).
4
How can I fix CVE-2022-36962 on my SolarWinds Orion Platform?
To fix CVE-2022-36962, update your SolarWinds Orion Platform to version 2022.4 or later.
5
Where can I find more information about CVE-2022-36962?
You can find more information about CVE-2022-36962 in the SolarWinds release notes and security advisories.