CVE-2023-35182

—

CVSS 3.1

9.8 critical

EPSS

2%p83

Published

Oct 19, 2023 (Oct 19, 2023)

Modified

Jun 17, 2026

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability can be abused by unauthenticated users on SolarWinds ARM Server.

Vendors: solarwinds
Products: access rights manager
Weakness: CWE-502
Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (2.4%)

In the news2 stories

Alert: PoC Exploits Released for Citrix and VMware Vulnerabilities

The Hacker NewsNov 2, 12:20 UTC · Nov 2, 2023Exploit / PoC in the wildCVE-2023-34051 CVE-2023-4966 CVE-2023-35182+2 CVEs

SolarWinds fixed three critical RCE flaws in its Access Rights Manager product

Security AffairsOct 23, 11:52 UTC · Oct 23, 2023Vulnerability CVE-2023-35182 CVE-2023-35185 CVE-2023-35187