PT-2015-7638 · Solarwinds · Solarwinds Log & Event Manager

Published 2015-10-15 · Updated 2016-12-03 · CVE-2015-7840

Positive Technologies (AI Summary)

CVSS v2.0

7.5

High

Base vector

AV:N/AC:L/Au:N/C:P/I:P/A:P

Name of the Vulnerable Software and Affected Versions SolarWinds Log and Event Manager versions prior to 6.2.0

Description The issue allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature in the command line management console of the affected software.

Recommendations For versions prior to 6.2.0, update to version 6.2.0 or later to resolve the issue.

Fix

Weakness Enumeration

CWE-264

Related Identifiers

CVE-2015-7840

Affected Products

Solarwinds Log & Event Manager

References · 3

• https://security.gentoo.org/glsa/201603-11 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2015-7840 · Security Note
• http://solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm · Vendor Advisory