Unrated severityNVD Advisory· Published Sep 8, 2021· Updated Sep 16, 2024
Insecure Deserialization of untrusted data causing Remote code execution vulnerability.
CVE-2021-35217
Description
Insecure Deseralization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module and reported to us by ZDI. An Authenticated Attacker could exploit it by executing WSAsyncExecuteTasks deserialization of untrusted data.
Affected products
1- Range: 2020.2.5 and previous versions
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
4- documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htmmitrex_refsource_MISC
- documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htmmitrex_refsource_MISC
- www.solarwinds.com/trust-center/security-advisories/cve-2021-35217mitrex_refsource_MISC
- www.zerodayinitiative.com/advisories/ZDI-21-1247/mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.