SolarWinds Orion Platform: SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVE-2022-47507)

SolarWinds Orion Platform: SolarWinds Platform Deserialization of Untrusted Data Vulnerability (CVE-2022-47507)

Severity

8

CVSS

(AV:N/AC:L/Au:M/C:C/I:C/A:C)

Published

02/15/2023

Created

07/28/2023

Added

07/27/2023

Modified

01/28/2025

Description

SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web Console to execute arbitrary commands.

Solution(s)

• solarwinds-orion-platform-upgrade-latest

References

• https://attackerkb.com/topics/cve-2022-47507
• CVE - 2022-47507
• https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-1_release_notes.htm
• https://www.solarwinds.com/trust-center/security-advisories/CVE-2022-47507