ZDI-CAN-17702: ZDI-23-457: SolarWinds Network Performance Monitor ExecuteExternalProgram Command Injection Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication is required to exploit this vulnerability.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-17702?
ZDI-CAN-17702 is classified as a critical vulnerability due to its potential for remote arbitrary code execution.
How do I fix ZDI-CAN-17702?
To remediate ZDI-CAN-17702, apply the latest security patches provided by SolarWinds for Network Performance Monitor.
Who is affected by ZDI-CAN-17702?
Organizations using affected installations of SolarWinds Network Performance Monitor that require authentication are vulnerable to ZDI-CAN-17702.
Can ZDI-CAN-17702 be exploited without authentication?
No, ZDI-CAN-17702 requires authentication for exploitation, limiting the impact to authenticated users.
What are the consequences of exploiting ZDI-CAN-17702?
Exploitation of ZDI-CAN-17702 could allow attackers to execute arbitrary code, leading to potential system compromise and data loss.