Skip to content
NewA calmer, faster ZeroHour
VulnerabilityPoC2 · 1 read

CVE-2021-25274

CVSS 3.1
9.8 critical
EPSS
36%p99
Published
·
Modified
Analyze CVE-2021-25274 with Vani AIImpact, affected versions, exploitation status, mitigations and detection

Description · NVD

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon processing of such messages, the service deserializes them in insecure manner, allowing remote arbitrary code execution as LocalSystem.

Vendors
solarwinds
Products
orion platform
Weakness
CWE-502
Vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
NVD CVE.org GitHub PoCs EPSS (36.4%)

In the news

5 stories