CVE-2023-23842

ALTO 7.2CVE-2023-23842 · Published 26/07/2023 · updated 17/06/2026

In breve

CVE-2023-23842 è una vulnerabilità ALTO (CVSS 7.2) che riguarda network configuration monitor (solarwinds).
Probabilità di sfruttamento nei prossimi 30 giorni (EPSS): 3.2%, superiore al 88.3% delle vulnerabilità.
Correzione: aggiornare a 2023.3.0 o successiva.

Package	Affected versions	Patched versions
network configuration monitor solarwinds	`< 2023.3.0`	`2023.3.0`

Description

The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands.

References

documentation.solarwinds.com/en/success_center/ncm/content/release_notes/ncm_2023-3_release_notes.htm · Release Notes
solarwinds.com/trust-center/security-advisories/CVE-2023-23842 · Vendor Advisory

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free