CVE-2020-14005 - Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event

Back Back to CVE browser

HIGH

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event

Published Jun 24, 2020

8.8

HIGH

CVSS 3.1

EPSS 14.33%

Description

Solarwinds Orion (with Web Console WPM 2019.4.1, and Orion Platform HF4 or NPM HF2 2019.4) allows remote attackers to execute arbitrary code via a defined event.

Affected products

Remediation

No remediation recorded yet.

Weaknesses (0)

No CWE recorded.

References (4)

https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6172
Advisory
https://gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7
x_refsource_MISCThird Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-063/
x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-065/
x_refsource_MISCThird Party AdvisoryVDB Entry

Link	Providers	Tags
https://euvd.enisa.europa.eu/vulnerability/EUVD-2020-6172		Advisory
https://gist.github.com/alert3/c9dcce5474e55f408c93c086c30cdbb7		x_refsource_MISCThird Party Advisory
https://www.zerodayinitiative.com/advisories/ZDI-21-063/		x_refsource_MISCThird Party AdvisoryVDB Entry
https://www.zerodayinitiative.com/advisories/ZDI-21-065/		x_refsource_MISCThird Party AdvisoryVDB Entry

Change history (0)

No recorded changes yet.

Sources

CVE.org / MITRE

Status PUBLISHED

Assigner mitre

Published Jun 24, 2020

Updated Aug 4, 2024

Reserved Jun 10, 2020

Link CVE-2020-14005

CISA Vulnrichment

No data

NVD

Status Modified

Modified Jun 17, 2026

Link CVE-2020-14005

Red Hat

No data

ENISA EUVD

Assigner mitre

Published Jun 24, 2020

Updated Aug 4, 2024

Link EUVD-2020-6172

GitHub

No data