CVE-2023-40054: SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33226
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is CVE-2023-40054?
CVE-2023-40054 is a Directory Traversal Remote Code Execution Vulnerability in SolarWinds Network Configuration Manager.
How severe is CVE-2023-40054?
CVE-2023-40054 has a severity rating of high (8 out of 10).
How can an attacker exploit CVE-2023-40054?
An attacker can exploit CVE-2023-40054 by performing directory traversal to execute arbitrary code with SYSTEM privileges.
Is there a fix for CVE-2023-40054?
Yes, CVE-2023-40054 has been fixed in the NCM 2023.4.1 release of SolarWinds Network Configuration Manager.
Where can I find more information about CVE-2023-40054?
You can find more information about CVE-2023-40054 in the SolarWinds security advisories and release notes.