CVE-2024-0692 SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability
Unauthenticated attackers can achieve remote code execution via unsafe deserialization in SolarWinds Security Event Manager.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2024-0692?
CVE-2024-0692 is a high-severity unsafe deserialization vulnerability in SolarWinds Security Event Manager , published on 1 Mar 2024. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.
Weakness: CWE-502
Which versions are affected by CVE-2024-0692?
It affects 1 product.
Products include Solarwinds Security Event Manager.
How do I fix CVE-2024-0692?
No fix has been published for CVE-2024-0692 yet. Limit exposure of the affected software until one is available.
Upgrade, and only deserialise data from trusted sources or with an allow-list of types. More about Unsafe deserialization.
Is CVE-2024-0692 being exploited?
It is not confirmed as exploited in the wild, but public exploit code for CVE-2024-0692 exists.
Public exploit code: 1 Nuclei template and 1 proofs of concept on GitHub.
Other vulnerabilities in SolarWinds Security Event Manager
Sources
Also known as GHSA-3fj5-f9x9-2hvx.