CVE-2023-33225: SolarWinds Platform Deserialization of Untrusted Data Vulnerability
Published Jul 26, 2023
·Updated
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.
Affected Software
1 affected component
SolarWinds SolarWinds Platform<2023.3.0
Remediation
Information
All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3
Event History
Jul 26, 2023
CVE Published
01:46 PM
Data Sourced
01:46 PM
RemedyDescriptionSeverityWeakness
Data Sourced
via NVD·02:15 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is CVE-2023-33225?
CVE-2023-33225 is the vulnerability known as the Incorrect Comparison Vulnerability in the SolarWinds Platform.
2
What is the severity of CVE-2023-33225?
CVE-2023-33225 has a severity rating of high with a score of 7.2 out of 10.
3
How does CVE-2023-33225 affect SolarWinds Platform?
CVE-2023-33225 allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.
4
What is the affected software for CVE-2023-33225?
The affected software for CVE-2023-33225 is SolarWinds Platform version up to 2023.3.0.
5
How can I fix CVE-2023-33225?
To fix CVE-2023-33225, it is recommended to apply the latest security patch provided by SolarWinds.