title: SolarWinds Platform Exposed Dangerous Method Vulnerability
description: The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.
problem types: CWE-697 Incorrect Comparison
affected:
{
defaultStatus: unaffected
product: SolarWinds Platform
vendor: SolarWinds
versions:
lessThan: 2023.3.1, status: affected, version: 0, versionType: 2023.3
}
metrics:
cvssV3_1: [
attackComplexity: LOW
attackVector: ADJACENT_NETWORK
availabilityImpact: HIGH
baseScore: 6.8
baseSeverity: MEDIUM
confidentialityImpact: HIGH
integrityImpact: HIGH
privilegesRequired: HIGH
scope: UNCHANGED
userInteraction: NONE
vectorString: CVSS:3.1/AV:A/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
version: 3.1
]
format: CVSS
scenarios: GENERAL
solutions: All SolarWinds Platform customers are advised to upgrade to the latest version of the SolarWinds Platform version 2023.3.1