ZDI-CAN-14156: SolarWinds Patch Manager WSAsyncExecuteTasks Deserialization of Untrusted Data Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Patch Manager. Authentication is required to exploit this vulnerability. The specific flaw exists within the WSAsyncExecuteTasks endpoint. The issue results from the lack of proper validation of user-supplied data, which can result in deserialization of untrusted data. An attacker can leverage this vulnerability to execute code in the context of NETWORK SERVICE.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-14156?
The severity of ZDI-CAN-14156 is categorized as high due to the potential for remote code execution.
How do I fix ZDI-CAN-14156?
To fix ZDI-CAN-14156, you should apply the latest security patches provided by SolarWinds for Patch Manager.
What causes the vulnerability ZDI-CAN-14156?
ZDI-CAN-14156 is caused by improper handling of input within the WSAsyncExecuteTasks endpoint.
Is authentication required to exploit ZDI-CAN-14156?
Yes, authentication is required to exploit the ZDI-CAN-14156 vulnerability.
What versions of SolarWinds Patch Manager are affected by ZDI-CAN-14156?
ZDI-CAN-14156 affects certain versions of SolarWinds Patch Manager that have not been updated with the latest security fixes.