CVE-2021-35218

Katalog CVE

CVSS 8.8 · High EPSS 76,4%

Kerentanan Deserialization of Untrusted Data pada solarwinds orion platform. Skor CVSS 3.1 8.8 (High) menurut NVD.

Deskripsi (NVD)

Deserialization of Untrusted Data in the Web Console Chart Endpoint can lead to remote code execution. An unauthorized attacker who has network access to the Orion Patch Manager Web Console could potentially exploit this and compromise the server

Rincian

Terbit di NVD

1 September 2021

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

8.8 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-502: Deserialization of Untrusted Data

EPSS (30 hari)

76,4% peluang dieksploitasi; lebih tinggi dari 99,5% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• https://documentation.solarwinds.com/en/success_center/patchman/content/release_notes/patchman_2020-2-6_releas... not applicable · advisory vendor
• https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35218 advisory vendor
• https://www.zerodayinitiative.com/advisories/ZDI-21-1248/ advisory pihak ketiga · vdb entry