ZDI-CAN-15316: SolarWinds Network Performance Monitor WriteToEventLog Exposed Dangerous Function Privilege Escalation Vulnerability
This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability. The specific flaw exists within the SolarWinds.Orion.Core.Actions.dll module. A crafted request can trigger execution of SQL queries composed from a user-supplied string. An attacker can leverage this vulnerability to escalate privileges to the level of an application administrator.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-15316?
The severity of ZDI-CAN-15316 is categorized as a critical severity vulnerability due to its potential to allow privilege escalation.
How do I fix ZDI-CAN-15316?
To fix ZDI-CAN-15316, apply the latest security patches and updates provided by SolarWinds for Network Performance Monitor.
Who is affected by ZDI-CAN-15316?
Organizations using affected installations of SolarWinds Network Performance Monitor are at risk of exploitation through ZDI-CAN-15316.
Is authentication required to exploit ZDI-CAN-15316?
Yes, authentication is required to exploit the ZDI-CAN-15316 vulnerability.
What component of SolarWinds is vulnerable in ZDI-CAN-15316?
The specific component vulnerable in ZDI-CAN-15316 is the SolarWinds.Orion.Core.Actions.dll module.