SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability
CVE-2023-40055

8HIGH

Key Information:

Vendor

Solarwinds
Status
Network Configuration Manager
Vendor
CVE Published:
9 November 2023

What is CVE-2023-40055?

The Network Configuration Manager by SolarWinds is exposed to a directory traversal vulnerability that permits a low-privileged user to execute commands with SYSTEM privileges. This lack of proper input validation not only allows unauthorized access to sensitive files on the system but also enables potential remote code execution. It is important to note that this issue persists and was not adequately addressed in prior vulnerabilities, further compromising the security framework of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

Affected Version(s)

Network Configuration Manager 2023.4 and previous versions

References

https://www.solarwinds.com/trust-center/security-advisori...

CVSS V3.1

Score:
8
Severity:
HIGH
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Adjacent Network
Attack Complexity:
Low
Privileges Required:
Low
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

Credit

SolarWinds Security Team
JSON
.