Critical severity9.8NVD Advisory· Published Feb 18, 2019· Updated Jun 17, 2026
CVE-2019-8917
CVE-2019-8917
Description
SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.
AI Insight
LLM-synthesized narrative grounded in this CVE's description and references.
Affected products
2- cpe:2.3:a:solarwinds:orion_network_performance_monitor:*:*:*:*:*:*:*:*Range: <12.4
- Range: <12.4
Patches
Vulnerability mechanics
References
2- www.securityfocus.com/bid/107061nvdThird Party AdvisoryVDB Entry
- github.com/VerSprite/research/blob/master/advisories/VS-2019-001.mdnvdThird Party Advisory
News mentions
0No linked articles in our index yet.