Vulnerability · Published Sep 1, 2021 · Assigned by SolarWinds
CVE-2021-35215ActionPluginBaseView Deserialization of Untrusted Data RCE
High 8.9
In plain English
A high-severity unsafe deserialization in Orion Platform from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 69.9% (higher than 99.4% of all known vulnerabilities). Ready-made attack tooling exists: public proof-of-concept code.
Severity (CVSS 3.1)8.9High
Exploit odds (30 days)69.9%top 0.6% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack tooling1Public PoC
Official description
Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Orion Platform | 2020.2.5 and previous versions – before 2020.2.6 |
Weakness: CWE-502 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
References
- https://documentation.solarwinds.com/en/success_center/orionplatform/content/core-secure-configuration.htm x_refsource_MISC
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35215 x_refsource_MISC
- https://documentation.solarwinds.co/enm/success_center/orionplatform/content/release_notes/orion_platform_2020-2-6_release_notes.htm x_refsource_MISC
- https://www.zerodayinitiative.com/advisories/ZDI-21-1245/ x_refsource_MISC