CVE-2020-14005

Katalog CVE

CVSS 8.8 · High EPSS 14,3%

Kerentanan pada solarwinds orion network performance monitor, solarwinds orion web performance monitor. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

Rincian

Terbit di NVD

24 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

EPSS (30 hari)

14,3% peluang dieksploitasi; lebih tinggi dari 96,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7 advisory pihak ketiga
• https://www.zerodayinitiative.com/advisories/ZDI-21-063/ advisory pihak ketiga · vdb entry
• https://www.zerodayinitiative.com/advisories/ZDI-21-065/ advisory pihak ketiga · vdb entry