CVE-2021-35215

HIGH

8.9

Description

Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

Details CVE

Score CVSS v3.18.9

SeveriteHIGH

Vecteur CVSSCVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L

Vecteur d'attaqueADJACENT_NETWORK

ComplexiteLOW

Privileges requisLOW

Interaction utilisateurNONE

Publie9/1/2021

Derniere modification11/21/2024

Sourcenvd

Observations honeypot0

Produits affectes

solarwinds:orion_platform

Faiblesses (CWE)

CWE-502CWE-502

References

https://documentation.solarwinds.co/enm/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm(psirt@solarwinds.com)

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm(psirt@solarwinds.com)

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35215(psirt@solarwinds.com)

https://www.zerodayinitiative.com/advisories/ZDI-21-1245/(psirt@solarwinds.com)

https://documentation.solarwinds.co/enm/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm(af854a3a-2127-422b-91ae-364da2661108)

https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm(af854a3a-2127-422b-91ae-364da2661108)

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35215(af854a3a-2127-422b-91ae-364da2661108)

https://www.zerodayinitiative.com/advisories/ZDI-21-1245/(af854a3a-2127-422b-91ae-364da2661108)

Correlations IOC

Aucune correlation enregistree

This product uses data from the NVD API but is not endorsed or certified by the NVD.