{"id":"CVE-2024-28075","published":"2024-05-09T12:42:44Z","modified":"2024-08-02T00:48:48Z","title":"SolarWinds ARM Deserialization of Untrusted Data Remote Code Execution","vendor":"SolarWinds","product":"Access Rights Manager","tier":"core","eol":null,"affectedVersions":[{"vendor":"SolarWinds","product":"Access Rights Manager","versions":[">= previous versions, <= 2023.2.3"]}],"description":{"text":"The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution. \n\nWe thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.   ","provenance":"source","from":"CVE.org"},"summary":{"text":"The flaw is a deserialization of untrusted data weakness in SolarWinds Access Rights Manager, which allows remote code execution. An attacker needs only an authenticated user account on the product, reachable over an adjacent network, with no user interaction required.","provenance":"ai","model":"claude-haiku-5-5","generatedAt":"2026-10-29T07:15:10Z"},"cvss":{"score":9,"severity":"CRITICAL","version":"3.1","vector":"CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H","provenance":"source","from":"CVE.org CNA"},"epss":{"score":0.78028,"percentile":0.99574,"date":"2026-10-29","provenance":"source"},"kev":null,"vulncheckKev":null,"exploited":false,"otx":{"pulseCount":0,"pulses":[],"provenance":"machine"},"cwes":[{"id":"CWE-502","name":"Deserialization of Untrusted Data"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28075","tags":[]},{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/release_notes/arm_2023-2-4_release_notes.htm","tags":[]},{"url":"https://documentation.solarwinds.com/en/success_center/arm/content/secure-your-arm-deployment.htm","tags":[]}],"techniques":[],"reports":[],"affected":[],"advisories":[],"euvd":{"id":"EUVD-2024-25242","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-25242","exploited":false,"exploitedSince":null,"provenance":"source"},"exploits":[],"exploitSources":null,"exploitRefs":[],"flow":[],"timeline":[{"date":"2024-05-09","kind":"published","label":"Published (CVE.org)","url":"https://www.cve.org/CVERecord?id=CVE-2024-28075","provenance":"source"}],"speed":{"daysToPublicExploit":null,"firstExploitFrom":null,"daysToKev":null},"priority":{"score":26.2,"factors":[{"name":"In a KEV catalog","points":0.0,"detail":"not listed"},{"name":"Recent KEV listing","points":0.0,"detail":"not listed"},{"name":"Known ransomware use","points":0.0,"detail":"not known"},{"name":"EPSS percentile","points":19.91,"detail":"percentile 0.9957"},{"name":"Named in threat reports","points":0.0,"detail":"0 reports"},{"name":"Public exploit code","points":0.0,"detail":"none found"},{"name":"Mentioned in OTX pulses","points":0.0,"detail":"0 pulses"},{"name":"CVSS severity","points":6.3,"detail":"base score 9"},{"name":"End-of-life product","points":0.0,"detail":"supported or unknown"}]}}