CVE-2023-23840: SolarWinds Platform Exposed Dangerous Method Vulnerability
Published Sep 13, 2023
·Updated
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
Affected Software
1 affected component
SolarWinds Orion Platform<2023.3.1
Remediation
Information
All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3.1
Event History
Sep 13, 2023
CVE Published
10:07 PM
Data Sourced
10:07 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·11:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-23840?
CVE-2023-23840 refers to the Incorrect Comparison Vulnerability present in the SolarWinds Platform.
2
How does CVE-2023-23840 impact the SolarWinds Platform?
CVE-2023-23840 allows users with administrative access to the SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
3
What is the severity of CVE-2023-23840?
CVE-2023-23840 has a severity rating of 7.2 (high).
4
Which version of the SolarWinds Platform is affected by CVE-2023-23840?
The SolarWinds Orion Platform up to version 2023.3.1 is affected by CVE-2023-23840.
5
How can I find more information about CVE-2023-23840?
You can find more information about CVE-2023-23840 in the SolarWinds documentation and security advisory.