ZDI-23-458: SolarWinds Network Performance Monitor TFTP Link Following Local Privilege Escalation Vulnerability
This vulnerability allows local attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. An attacker must first obtain the ability to execute low-privileged code on the target system in order to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-23-458?
The severity of ZDI-23-458 is considered high due to its potential for allowing privilege escalation.
How do I fix ZDI-23-458?
To fix ZDI-23-458, ensure that you update to the latest version of SolarWinds Network Performance Monitor that includes the security patch.
Who is affected by ZDI-23-458?
Organizations using affected versions of SolarWinds Network Performance Monitor are at risk from ZDI-23-458.
Can ZDI-23-458 be exploited remotely?
ZDI-23-458 requires local access to the system to exploit, so it cannot be exploited remotely.
What types of attacks are associated with ZDI-23-458?
ZDI-23-458 is associated with privilege escalation attacks where an attacker can gain higher access rights on the system.