PT-2021-20856 · Solarwinds · Solarwinds Network Performance Monitor

Fkadibs · Published 2021-12-20 · Updated 2024-09-16 · CVE-2021-35234

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: SolarWinds Network Performance Monitor (affected versions not specified)

Description: The issue involves numerous exposed dangerous functions within Orion Core, allowing for read-only SQL injection and leading to privileged escalation. An attacker with low-user privileges may steal password hashes and password salt information. The vulnerability affects various functions, including SendHttpRequest, WriteToEventLog, SendSyslog, Email, CustomProperty, CustomStatus, SnmpTrap, PlaySound, and TextToSpeech.

Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

SQL injection

Weakness Enumeration

CWE-89

Related Identifiers

CVE-2021-35234

ZDI-21-1596

ZDI-21-1597

ZDI-21-1598

ZDI-21-1599

ZDI-21-1600

ZDI-21-1601

ZDI-21-1602

ZDI-21-1603

ZDI-21-1604

Affected Products

Solarwinds Network Performance Monitor

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2021-35234 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1598 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1600 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1597 · Security Note
• https://osv.dev/vulnerability/CVE-2021-35234 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1604 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1599 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1602 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1596 · Security Note
• https://zerodayinitiative.com/advisories/ZDI-21-1603 · Security Note
• https://support.solarwinds.com/SuccessCenter/s/article/Orion-Platform-2020-2-6-Hotfix-3 · Vendor Advisory
• https://zerodayinitiative.com/advisories/ZDI-21-1601 · Security Note
• https://documentation.solarwinds.com/en/Success_Center/orionplatform/content/core-secure-configuration.htm · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/cve-2021-35234 · Vendor Advisory
• https://t.me/cvenotify/55734 · Telegram Post