CVE-2024-28075: SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution
The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.
We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.
Affected Software
Remediation
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2024-28075?
CVE-2024-28075 is considered a critical vulnerability due to its potential for remote code execution.
How do I fix CVE-2024-28075?
To fix CVE-2024-28075, ensure that you update your SolarWinds Access Rights Manager to the latest patched version.
Who can exploit CVE-2024-28075?
CVE-2024-28075 can be exploited by an authenticated user of SolarWinds Access Rights Manager.
What type of vulnerability is CVE-2024-28075?
CVE-2024-28075 is classified as a Remote Code Execution (RCE) vulnerability.
What impact does CVE-2024-28075 have on my system?
The impact of CVE-2024-28075 may allow unauthorized execution of code, potentially compromising system integrity.