Heap Overflow Vulnerability in Asset Explorer Agent from SolarWinds

CVE-2021-20109

What is CVE-2021-20109?

The Asset Explorer agent suffers from a vulnerability due to insufficient validation of HTTPS certificates, allowing attackers on the local network to impersonate the Asset Explorer server. An attacker can statically configure their IP to match the server's; thereby manipulating communication with the agent. The exploitation occurs when a malicious actor sends a NEWSCAN request to a listening agent, which can lead to a heap overflow in the AEAgent.cpp source file. This happens if a POST payload response exceeds the 0x2000-byte buffer limit, as it is converted to Unicode without proper size checks, leading to potential denial of service or arbitrary code execution.

References