CVSS 3.1
8.8 highCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:HCVE-2024-0692
High (8.8) in solarwinds security event manager. EPSS 92% chance of exploitation in the next 30 days.
The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.
Severity
- EPSS
- 92% chance of exploitation in the next 30 days; higher than 99% of CVEs (scores of 2026-10-31)
- CWE
- CWE-502
- Published
- Modified
- Record from
- the NVD, synced
Affected
- solarwinds:security_event_manager
References
- https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692
- https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692