CVE-2024-28986

high-risk
Published 2024-08-13

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing.   However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

Do I need to act?

!
75.0% chance of exploitation in next 30 days
EPSS score — higher than 25% of all CVEs
!
CISA KEV: actively exploited in the wild
On the Known Exploited Vulnerabilities catalog — federal agencies must patch
?
Patch status unknown
Check vendor advisories for fix availability and mitigation guidance
9
CVSS 9.8/10 Critical
NETWORK / LOW complexity

Affected Products (2)

Affected Vendors

Solarwinds

References (3)

Broken Link https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1
Vendor Advisory https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28986
US Government Resource https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-...
65
/ 100
high-risk
Severity 32/34 · Critical
Exploitability 26/34 · High
Exposure 7/34 · Low