ZDI-21-1604: SolarWinds Network Performance Monitor SendSyslog Exposed Dangerous Function Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SendSyslog class. This class allows a crafted user-supplied string to be processed as an SQL statement. An attacker can leverage this vulnerability to escalate privileges to the level of an application administrator.
| Affected Software | Affected Version | How to fix |
|---|---|---|
Never miss a vulnerability like this again
Sign up to SecAlerts for real-time vulnerability data matched to your software, aggregated from hundreds of sources.
Reference Links
Frequently Asked Questions
What is the vulnerability ID?
The vulnerability ID is ZDI-21-1604.
What is the severity of ZDI-21-1604?
The severity of ZDI-21-1604 is high with a CVSS score of 8.8.
What software is affected by ZDI-21-1604?
ZDI-21-1604 affects SolarWinds Network Performance Monitor.
Is authentication required to exploit ZDI-21-1604?
Yes, authentication is required to exploit ZDI-21-1604.
How can I learn more about ZDI-21-1604?
You can learn more about ZDI-21-1604 by referring to the following references: [SolarWinds Security Advisory](https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35234) and [Zero Day Initiative Advisory](https://www.zerodayinitiative.com/advisories/ZDI-21-1604/).
- agent/references
- agent/type
- collector/zdi-advisory
- source/ZDI
- alias/ZDI-21-1604
- alias/ZDI-CAN-14859
- alias/CVE-2021-35234
- agent/software-canonical-lookup
- agent/title
- agent/severity
- agent/softwarecombine
- agent/tags
- agent/description
- agent/event
- vendor/solarwinds
- canonical/solarwinds network performance monitor