ZDI-CAN-19907: ZDI-23-168: SolarWinds Network Performance Monitor sshd_SftpRename Directory Traversal Remote Code Execution Vulnerability
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Performance Monitor. Authentication may be required to exploit this vulnerability, depending on the product configuration.
Affected Software
Event History
Frequently Asked Questions
What is the severity of ZDI-CAN-19907?
ZDI-CAN-19907 is considered a critical vulnerability due to its potential for remote arbitrary code execution.
How do I fix ZDI-CAN-19907?
To mitigate ZDI-CAN-19907, ensure that you apply the latest security patches provided by SolarWinds for Network Performance Monitor.
Who is affected by ZDI-CAN-19907?
Organizations using affected installations of SolarWinds Network Performance Monitor are vulnerable to ZDI-CAN-19907.
What type of attacks can ZDI-CAN-19907 enable?
ZDI-CAN-19907 enables remote attackers to execute arbitrary code on vulnerable systems.
Is authentication required to exploit ZDI-CAN-19907?
Authentication may be required to exploit ZDI-CAN-19907, depending on the specific configuration of the product.