CVE-2022-47503

Name of the Vulnerable Software and Affected Versions SolarWinds Orion (affected versions not specified)

Description The issue is related to the deserialization of untrusted data, which can allow a remote adversary with admin-level account access to the SolarWinds Web Console to execute arbitrary commands. This can be exploited by an attacker to gain unauthorized access and control.

Recommendations As a temporary workaround, consider restricting access to the SolarWinds Web Console to minimize the risk of exploitation. Restrict access to admin-level accounts in the SolarWinds Web Console until a patch is available. At the moment, there is no information about a newer version that contains a fix for this vulnerability.