SQL Injection Vulnerability in SolarWinds Storage Manager and Related Products
CVE-2012-2576

9.8CRITICAL

Key Information:

Vendor

Solarwinds
Status
Backup Profiler
Storage Profiler
Storage Manager
Vendor
CVE Published:
20 December 2017

Badges

👾 Exploit Exists🟡 Public PoC🟣 EPSS 41%

What is CVE-2012-2576?

An SQL injection vulnerability exists in the LoginServlet page of several SolarWinds products, including Storage Manager, Storage Profiler, and Backup Profiler. This vulnerability allows remote attackers to manipulate SQL queries through the loginName field, potentially leading to unauthorized access and the execution of arbitrary SQL commands. Affected versions prior to 5.1.2 must be updated to mitigate this risk.

Exploit Proof of Concept (PoC)

PoC code is written by security researchers to demonstrate the vulnerability can be exploited. PoC code is also a key component for weaponization which could lead to ransomware.

CVE-2012-2576 - Proof of Concept

CVE-2012-2576 - Proof of Concept

References

https://exchange.xforce.ibmcloud.com/vulnerabilities/72680
vdb-entryx_refsource_XF
http://www.solarwinds.com/documentation/storage/storagema...
x_refsource_CONFIRM
http://www.exploit-db.com/exploits/18818
exploitx_refsource_EXPLOIT-DB

EPSS Score

41% chance of being exploited in the next 30 days.

CVSS V3.1

Score:
9.8
Severity:
CRITICAL
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • 🟡

    Public PoC available

  • 👾

    Exploit known to exist

  • Vulnerability published

  • Vulnerability Reserved

.