VYPR
← All advisories
High severity8.8NVD Advisory· Published Feb 12, 2021· Updated Jun 17, 2026

CVE-2020-27869

CVE-2020-27869

Description

This vulnerability allows remote attackers to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges and reset the password for the Admin user. Was ZDI-CAN-11804.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

4
  • SolarWinds/Network Performance Monitor4 versions
    cpe:2.3:a:solarwinds:network_performance_monitor:2020:hotfix1:*:*:*:*:*:*+ 3 more
    • cpe:2.3:a:solarwinds:network_performance_monitor:2020:hotfix1:*:*:*:*:*:*
    • cpe:2.3:a:solarwinds:network_performance_monitor:2020.2:*:*:*:*:*:*:*
    • (no CPE)range: 2020 HF1, NPM: 2020.2
    • (no CPE)range: 2020 HF1, NPM: 2020.2

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.