ZDI-CAN-21105: ZDI-23-1005: SolarWinds Orion Platform UpdateActionsProperties Incorrect Behavior Order Remote Code Execution Vulnerability
Published Jul 27, 2023
·Updated
This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Orion Platform. Authentication is required to exploit this vulnerability.
Affected Software
1 affected component
SolarWinds Orion Platform
Event History
Jul 27, 2023
Advisory Published
05:00 AM
Data Sourced
05:00 AM
Description
Frequently Asked Questions
1
What is the severity of ZDI-CAN-21105?
The severity of ZDI-CAN-21105 is considered critical due to its potential for remote code execution.
2
How do I fix ZDI-CAN-21105?
To remediate ZDI-CAN-21105, you should update to the latest version of the SolarWinds Orion Platform that addresses this vulnerability.
3
Who is affected by ZDI-CAN-21105?
Any organization using the affected versions of the SolarWinds Orion Platform is at risk from ZDI-CAN-21105.
4
Can ZDI-CAN-21105 be exploited without authentication?
No, ZDI-CAN-21105 requires authentication to exploit the vulnerability.
5
What potential impact does ZDI-CAN-21105 have?
If successfully exploited, ZDI-CAN-21105 allows remote attackers to execute arbitrary code on the affected system.