Recent Vulnerabilities Research Posts Trends Blog About Contact

Published: 12/02/2021 Updated: 26/03/2021

CVSS v2 Base Score: 9 | Impact Score: 10 | Exploitability Score: 8

CVSS v3 Base Score: 8.8 | Impact Score: 5.9 | Exploitability Score: 2.8

VMScore: 801

Vector: AV:N/AC:L/Au:S/C:C/I:C/A:C

Subscribe to Network Performance Monitor

This vulnerability allows remote malicious users to escalate privileges on affected installations of SolarWinds Network Performance Monitor 2020 HF1, NPM: 2020.2. Authentication is required to exploit this vulnerability. The specific flaw exists within the WriteToFile method. The issue results from the lack of proper validation of a user-supplied string before using it to construct SQL queries. An attacker can leverage this vulnerability to escalate privileges and reset the password for the Admin user. Was ZDI-CAN-11804.

Vulnerable Product	Search on Vulmon	Subscribe to Product
solarwinds network performance monitor 2020
solarwinds network performance monitor 2020.2

CWE-89 https://www.zerodayinitiative.com/advisories/ZDI-21-064/https://nvd.nist.gov https://www.zerodayinitiative.com/advisories/ZDI-21-064/

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook

CVE-2020-27869

Vulnerability Summary

Vulnerability Trend

References

Vulmon Search

About

Products

Connect