ZDI-23-1586: SolarWinds Network Configuration Manager SaveResultsToFile Directory Traversal Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Network Configuration Manager. Authentication is required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 8.8. The following CVEs are assigned: CVE-2023-33227.

arbitrary code attackers authentication code code execution configuration configuration manager cve cves cvss directory directory traversal exploit manager network rating remote code remote code execution solarwinds vulnerability zdi