vulnerability

SolarWinds Access Rights Manager: CVE-2024-28075: Deserialization of Untrusted Data Remote Code Execution Vulnerability

Try Surface Command

Back to search

Severity	CVSS	Published	Added	Modified
8	(AV:A/AC:L/Au:S/C:C/I:C/A:C)	May 9, 2024	Apr 9, 2025	Jul 2, 2025

Severity

CVSS

(AV:A/AC:L/Au:S/C:C/I:C/A:C)

Published

May 9, 2024

Added

Apr 9, 2025

Modified

Jul 2, 2025

Description

The SolarWinds Access Rights Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an authenticated user to abuse SolarWinds service resulting in remote code execution.

Solution

solarwinds-access-rights-manager-upgrade-latest

References

CWE-502
CVE-2024-28075
https://attackerkb.com/topics/CVE-2024-28075
URL-https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28075

NEW

Explore Exposure Command

Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.

Try it today