SolarWinds Network Configuration Manager Directory Traversal Remote Code Execution Vulnerability

CVE-2023-40055

What is CVE-2023-40055?

The Network Configuration Manager by SolarWinds is exposed to a directory traversal vulnerability that permits a low-privileged user to execute commands with SYSTEM privileges. This lack of proper input validation not only allows unauthorized access to sensitive files on the system but also enables potential remote code execution. It is important to note that this issue persists and was not adequately addressed in prior vulnerabilities, further compromising the security framework of the application.

References