CVE-2024-23476

—

CVSS 3.1

9.6 critical

EPSS

7%p94

Published

Feb 15, 2024 (Feb 15, 2024)

Modified

Jun 17, 2026

Description

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve the Remote Code Execution.

Vendors: solarwinds
Products: access rights manager
Weakness: CWE-22
Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (7.1%)

In the news2 stories

SolarWinds addressed critical RCEs in Access Rights Manager

Security AffairsFeb 19, 07:48 UTC · Feb 19, 2024Vulnerability CVE-2023-40057 CVE-2024-23476 CVE-2024-23477+4 CVEs

RCE vulnerabilities fixed in SolarWinds enterprise solutions

Help Net SecurityFeb 19, 00:00 UTC · Feb 19, 2024Vulnerability CVE-2024-23476 CVE-2024-23479 CVE-2024-23477+4 CVEs