ZDI-24-215: SolarWinds Security Event Manager AMF Deserialization of Untrusted Data Remote Code Execution Vulnerability

This vulnerability allows remote attackers to execute arbitrary code on affected installations of SolarWinds Security Event Manager. Authentication is not required to exploit this vulnerability. The ZDI has assigned a CVSS rating of 9.8. The following CVEs are assigned: CVE-2024-0692.

arbitrary code attackers authentication code code execution cve cves cvss data deserialization event exploit manager rating remote code remote code execution security solarwinds untrusted vulnerability zdi