CyberRota Analysis
This is a critical severity vulnerability with a CVSS score of 9.0. Public exploit code or proof-of-concept references have been detected in its references. It may be remotely exploitable. Exploitation may require the attacker to be authenticated.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Detected Signals
exploit remote code execution code execution
Note: these links are listed for security research and verification purposes only.
CVE
CVE-2024-28991
Severity
CRITICAL
CVSS
9
EPSS
3.08%
Original NVD Description
SolarWinds Access Rights Manager (ARM) was found to be susceptible to a remote code execution vulnerability. If exploited, this vulnerability would allow an authenticated user to abuse the service, resulting in remote code execution.
Related CVEs
Other vulnerabilities affecting the same vendor(s)