CVE-2023-33225 — SolarWinds Platform Deserialization of Untrusted Data Vulnerability

Description (CNA)

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

Affected (CNA)

Vendor / product	Versions
SolarWinds / SolarWinds Platform	affected 0 before 2023.3

CWE

CWE-697

References

https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33225
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

ADP enrichment

CVE

No English description supplied.

https://www.solarwinds.com/trust-center/security-advisories/cve-2023-33225
https://documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3_release_notes.htm

CISA-ADP

No English description supplied.

No references supplied.