SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability

CVE-2023-40054

What is CVE-2023-40054?

The Network Configuration Manager from SolarWinds is exposed to a vulnerability that enables low-level users to exploit directory traversal, gaining access to perform actions with SYSTEM privileges. This flaw allows unauthorized manipulation of system commands and access to sensitive files. Although an attempt to address this issue was made in a previous version (CVE-2023-33226), it remains unresolved, putting users at risk of significant security breaches.

References