CVE-2024-23479: SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this…

PriorityP263critical9.6CVSS 3.1

AVAACLPRNUINSCCHIHAH

EPSS

5.79%

92.2th percentile

SolarWinds Access Rights Manager (ARM) was found to be susceptible to a Directory Traversal Remote Code Execution Vulnerability. If exploited, this vulnerability allows an unauthenticated user to achieve a Remote Code Execution.

Affected

2 ranges

Vendor	Product	Version range	Fixed in
solarwinds	access_rights_manager	< 2023.2.3	2023.2.3
solarwinds	access_rights_manager	previous versions – 2023.2.2	—

Detection & IOCsextracted from sources · hover to see the quote

→CVE-2024-23479 is a Directory Traversal (path traversal) weakness in SolarWinds Access Rights Manager (ARM) that allows unauthenticated remote code execution. Detection should focus on path traversal patterns in HTTP requests targeting ARM endpoints. ↗
→The vulnerability is exploitable by unauthenticated attackers, so monitor for unauthenticated requests containing directory traversal sequences (e.g., ../, ..\ ) directed at SolarWinds ARM services. ↗

·SolarWinds has stated no in-the-wild exploitation has been reported at time of disclosure; however, the critical CVSS score of 9.6 and unauthenticated nature of the exploit make it high-priority for patching. ↗
·CVE-2024-23479 was reported by anonymous researchers via Trend Micro's Zero Day Initiative (ZDI); no public proof-of-concept exploit code is referenced in the available sources, limiting immediate signature-based detection options. ↗

Stop checking back — get the weekly exploitation signal.

Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.