PT-2024-1932 · Solarwinds · Solarwinds Security Event Manager

Published

2024-01-17

·

Updated

2026-04-13

·

CVE-2024-0692

CVSS v3.1

9.8

Critical

VectorAV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions SolarWinds Security Event Manager (affected versions not specified)
Description The SolarWinds Security Event Manager is susceptible to a Remote Code Execution vulnerability. This issue allows an unauthenticated user to abuse SolarWinds' service, resulting in remote code execution. The vulnerability is related to the deserialization of untrusted data in the AMF (Action Message Format) mechanism. It is estimated that over 200 devices worldwide may be affected. There have been reports of real-world incidents where this issue was exploited.
Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

RCE

Deserialization of Untrusted Data

Weakness Enumeration

CWE-502

Related Identifiers

BDU:2024-01721
CVE-2024-0692
ZDI-24-215

Affected Products

Solarwinds Security Event Manager