CVE-2023-40057

—

CVSS 3.1

9.0 critical

EPSS

5%p91

Published

Feb 15, 2024 (Feb 15, 2024)

Modified

Jun 17, 2026

Description

The SolarWinds Access Rights Manager was found to be susceptible to a Remote Code Execution Vulnerability. If exploited, this vulnerability allows an authenticated user to abuse a SolarWinds service resulting in remote code execution.

Vendors: solarwinds
Products: access rights manager
Weakness: CWE-502
Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (4.9%)

In the news2 stories

SolarWinds addressed critical RCEs in Access Rights Manager

Security AffairsFeb 19, 07:48 UTC · Feb 19, 2024Vulnerability CVE-2023-40057 CVE-2024-23476 CVE-2024-23477+4 CVEs

RCE vulnerabilities fixed in SolarWinds enterprise solutions

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2024Vulnerability CVE-2024-23476 CVE-2024-23479 CVE-2024-23477+4 CVEs