VulnerabilitycriticalExploited in the wild

SolarWinds Patches 8 Critical Flaws in Access Rights Manager Software

The Hacker Newsby @TheHackersNewsJul 20, 2024 · 04:07 UTC (Jul 20, 2024)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2024-23472 CVE-2024-28074 CVE-2024-23469 CVE-2024-23475 CVE-2024-23467 CVE-2024-23466 CVE-2024-23470 CVE-2024-23471 CVE-2024-28995

Tags: cve-2024-23472 cve-2024-28074 cve-2024-23469 cve-2024-23475 cve-2024-23467 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2024-23469 +7 related CVEs CVE-2024-28074 CVE-2024-23467 CVE-2024-23466 CVE-2024-23475 CVE-2024-23471 CVE-2024-23470 CVE-2024-23472	SolarWinds Access Rights Manager (ARM) is susceptible to a Remote Code Execution vulnerability	8.8 group max	18%		Jul 17, 2024
CVE-2024-28995	Unauthenticated Path Traversal File-Read in SolarWinds Serv-U	7.5	100%	KEV	Jun 6, 2024 KEV Jul 17, 2024

From the original article

2 min read at thehackernews.com

 Ravie Lakshmanan  Jul 19, 2024 Vulnerability / Enterprise Security SolarWinds has addressed a set of critical security flaws impacting its Access Rights Manager (ARM) software that could be exploited to access sensitive information or execute arbitrary code. Of the 13 vulnerabilities, eight are rated Critical in severity and carry a CVSS score of 9. 6 out of 10.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.