CVE-2023-33227
published 2023-11-01CVE-2023-33227: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to…
PriorityP261high8.8CVSS 3.1
AVNACLPRLUINSUCHIHAH
EPSS
1.84%
76.3th percentile
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.
Affected
3 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| solarwinds | network_configuration_manager | < 2023.4 | 2023.4 |
| solarwinds | network_configuration_manager | <= 2023.4 | — |
| solarwinds | network_configuration_manager | — | — |
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
GHSA-25mw-fj8x-6qq5: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
ghsa_unreviewed·2023-11-09·CVSS 8.0
CVE-2023-40055 [HIGH] CWE-22 GHSA-25mw-fj8x-6qq5: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions with SYSTEM privileges. We found this issue was not resolved in CVE-2023-33227
GHSA
GHSA-v65v-mq8p-jwmw: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level u
ghsa_unreviewed·2023-11-01
CVE-2023-33227 [HIGH] CWE-22 GHSA-v65v-mq8p-jwmw: The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level u
The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions with SYSTEM privileges.
No detection rules found.
No public exploits indexed.
No writeups or analysis indexed.
https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htmhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33227https://documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-4_release_notes.htmhttps://www.solarwinds.com/trust-center/security-advisories/CVE-2023-33227
2023-11-01
Published