CVE-2023-33224: SolarWinds Platform Incorrect Behavior Order Vulnerability

Q: What is CVE-2023-33224?

CVE-2023-33224 is the vulnerability in the SolarWinds Platform known as the Incorrect Behavior Order Vulnerability.

Q: How does CVE-2023-33224 impact SolarWinds Platform?

CVE-2023-33224 allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Q: What is the severity of CVE-2023-33224?

CVE-2023-33224 has a severity rating of 7.2, which is considered high.

Q: Which software versions are affected by CVE-2023-33224?

The SolarWinds Platform versions up to exclusive 2023.3.0 are affected by CVE-2023-33224.

Q: How can I fix CVE-2023-33224?

To fix CVE-2023-33224, it is recommended to update the SolarWinds Platform to a version beyond 2023.3.0.

Published Jul 26, 2023

Updated

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Affected Software

1 affected component

SolarWinds SolarWinds Platform<2023.3.0

Remediation

Information

All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3

Event History

Jul 26, 2023

CVE Published

via MITRE·01:53 PM

Data Sourced

via MITRE·01:53 PM

RemedyDescriptionSeverityWeakness

Frequently Asked Questions

What is CVE-2023-33224?

CVE-2023-33224 is the vulnerability in the SolarWinds Platform known as the Incorrect Behavior Order Vulnerability.

How does CVE-2023-33224 impact SolarWinds Platform?

CVE-2023-33224 allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

What is the severity of CVE-2023-33224?