CVE-2024-23477

published 2024-02-15

CVE-2024-23477: The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this…

Priority P2 65 critical 9.6 CVSS 3.1

AV A AC L PR N UI N S C C H I H A H

The SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
solarwinds	access_rights_manager	< 2023.2.3	2023.2.3
solarwinds	access_rights_manager	previous versions – 2023.2.2	—

Detection & IOCs extracted from sources · hover to see the quote

• → CVE-2024-23477 is a Directory Traversal vulnerability in SolarWinds Access Rights Manager (ARM) that enables Remote Code Execution; defenders should monitor for path traversal patterns in ARM service requests ↗
• → CVE-2024-23477 is rated High severity (CVSS 7.9) and can be used in RCE attacks against SolarWinds ARM; prioritize patching to Access Rights Manager version 2023.2.3 ↗
• → CVE-2024-23477 was reported by anonymous researchers via Trend Micro's Zero Day Initiative (ZDI); monitor ZDI advisories for additional technical details or PoC that could inform detection signatures ↗

• · SolarWinds reported no in-the-wild exploitation at time of disclosure; however, the vulnerability is unauthenticated and should be treated as high-priority for patching ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.

CWE-22