CVE-2023-33226
published 2023-11-01CVE-2023-33226: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to…
PriorityP261high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.84%
76.3th percentile
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| solarwinds | network_configuration_manager | < 2023.4 | 2023.4 |
| solarwinds | network_configuration_manager | <= 2023.4 | — |
| solarwinds | network_configuration_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-g59m-mj82-7p6w: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
ghsa_unreviewed·2023-11-09·CVSS 8.0
CVE-2023-40054 [HIGH] CWE-22 GHSA-g59m-mj82-7p6w: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33226
GHSA
GHSA-rff7-hrv3-jggw: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
ghsa_unreviewed·2023-11-01
CVE-2023-33226 [HIGH] CWE-22 GHSA-rff7-hrv3-jggw: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htmhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33226https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htmhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33226
2023-11-01
Published