SolarWinds Network Performance Monitor CVE-2017-9538 Denial of Service Vulnerability



SolarWinds Network Performance Monitor is prone to a denial-of-service vulnerability.

Remote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users.

Information

Bugtraq ID: 101066
Class: Design Error
CVE: CVE-2017-9538

Remote: Yes
Local: No
Published: Sep 29 2017 12:00AM
Updated: Sep 29 2017 12:00AM
Credit: Andy Tan
Vulnerable: SolarWinds Orion Platform 2017.3 Hotfix 1
SolarWinds Network Performance Monitor 12.0.15300.90
SolarWinds Network Performance Monitor 11.5
SolarWinds Network Performance Monitor 10.7
SolarWinds Network Performance Monitor 10.6.1


Not Vulnerable:

Exploit


The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.


Related Posts

Comments