CVE-2023-35182: SolarWinds Access Rights Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
Published Oct 19, 2023
·Updated
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.
Affected Software
1 affected component
SolarWinds Access Rights Manager<=2023.2.0.73
Remediation
Information
All SolarWinds Access Rights Manager customers are advised to upgrade to the latest version of the SolarWinds Access Rights Manager 2023.2.1
Event History
Oct 19, 2023
CVE Published
via MITRE·02:23 PM
Data Sourced
via MITRE·02:23 PM
RemedyDescriptionSeverityWeakness
Data Sourced
03:15 PM
DescriptionSeverityWeakness
Frequently Asked Questions
1
What is CVE-2023-35182?
CVE-2023-35182 is a vulnerability in the SolarWinds Access Rights Manager that allows unauthenticated users to execute remote code.
2
How severe is CVE-2023-35182?
CVE-2023-35182 has a severity rating of 9.8 (critical).
3
Which software is affected by CVE-2023-35182?
The SolarWinds Access Rights Manager version 2023.2.0.73 is affected by CVE-2023-35182.
4
How can an unauthenticated user exploit CVE-2023-35182?
An unauthenticated user can exploit CVE-2023-35182 by executing remote code on the SolarWinds ARM Server.
5
Where can I find more information about CVE-2023-35182?
You can find more information about CVE-2023-35182 in the SolarWinds documentation and security advisories.