CVE-2022-36958 : Security Advisory and Response

SolarWinds Platform was found to be vulnerable to the Deserialization of Untrusted Data, potentially allowing a remote attacker to execute arbitrary commands through the SolarWinds Web Console.

Understanding CVE-2022-36958

This CVE involves a critical vulnerability in SolarWinds Platform that could lead to remote code execution.

What is CVE-2022-36958?

The CVE-2022-36958, known as the SolarWinds Platform Deserialization of Untrusted Data vulnerability, affects SolarWinds Platform and Orion Platform versions.

The Impact of CVE-2022-36958

This vulnerability poses a high risk as it could enable unauthorized remote attackers to execute malicious commands on the affected SolarWinds systems.

Technical Details of CVE-2022-36958

This section covers specific technical information about the vulnerability.

Vulnerability Description

The vulnerability arises from the improper handling of deserialization of untrusted data within SolarWinds Platform, leading to potential remote code execution.

Affected Systems and Versions

SolarWinds Platform versions prior to 2022.3 and Orion Platform versions before 2020.2.6 HF5 are confirmed to be impacted by this vulnerability.

Exploitation Mechanism

Remote attackers with valid access to the SolarWinds Web Console can exploit this vulnerability to execute arbitrary commands on the affected systems.

Mitigation and Prevention

To address CVE-2022-36958 and enhance security, follow these mitigation strategies:

Immediate Steps to Take

Upgrade to SolarWinds Platform version 2022.4 once available, expected by the end of October.
Implement the security guidance outlined in the SolarWinds Secure Configuration Guide to safeguard the platform.
Restrict access to the SolarWinds Platform to authorized users only.

Long-Term Security Practices

Maintain strict access controls and regularly update the SolarWinds Platform to ensure protection against potential vulnerabilities.

Patching and Updates

Ensure timely installation of patches and updates released by SolarWinds to eliminate security gaps and maintain the integrity of the platform.