CVE-2023-23840

ALTO 7.2CVE-2023-23840 · Published 13/09/2023 · updated 17/06/2026

En resumen

CVE-2023-23840 es una vulnerabilidad ALTO (CVSS 7.2) que afecta a orion platform (solarwinds).
Probabilidad de explotación en los próximos 30 días (EPSS): 5.4%, mayor que el 92.7% de las vulnerabilidades.
Solución: actualizar a 2023.3.1 o posterior.

Package	Affected versions	Patched versions
orion platform solarwinds	`< 2023.3.1`	`2023.3.1`

Description

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

References

documentation.solarwinds.com/en/success_center/orionplatform/content/release_notes/solarwinds_platform_2023-3-1_release_notes.htm · Vendor Advisory
solarwinds.com/trust-center/security-advisories/CVE-2023-23840 · Vendor Advisory

Más vulnerabilidades de orion platform

Ver todo →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

orion platform

solarwinds

< 2023.3.1

2023.3.1

Más vulnerabilidades de orion platform

Ver todo →