CVE-2024-28986
Last modified
CVE-2024-28986 is a critical-severity vulnerability rated 9.8/10 on the CVSS scale. SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. CISA has confirmed active exploitation in the wild. EPSS estimates a 84.45% chance of exploitation in the next 30 days.
Description
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Web Help Desk | <= 12.8.2 |
| Solarwinds | Web Help Desk | 12.8.3 |
References
- https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1Broken Link, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28986US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2024-28986?
How severe is CVE-2024-28986?
How do I fix CVE-2024-28986?
Are you affected by CVE-2024-28986?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST