CVE-2021-35216

High

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration…

SolarWinds·CWE-502·Published 2021-09-01

CVSS

8.8

EPSS

0.81

KEV

Exploits

cve.orgen

271 chars

Insecure Deserialization of untrusted data remote code execution vulnerability was discovered in Patch Manager Orion Platform Integration module. An Authenticated Attacker with network access via HTTP can compromise this vulnerability can result in Remote Code Execution.

NVDen

271 chars

NVDes

317 chars

Se ha detectado una vulnerabilidad de ejecución de código remota en una deserialización insegura de datos no confiables en Patch Manager Orion Platform Integration module. Un atacante autenticado con acceso a la red por medio de HTTP puede comprometer esta vulnerabilidad y dar lugar a una ejecución de código remota

CVSS metrics across sources

Version	Type	Source	Base	Exp	Impact	Vector
2.0	Primary	NVD	9.0	8.0	10.0	AV:N/AC:L/Au:S/C:C/I:C/A:C
3.1	Primary	cve.org	8.9	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
3.1	Primary	cve.org	8.9	—	—	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L
3.1	Primary	NVD	8.8	2.8	5.9	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	8.9	2.3	6.0	CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:L