CVE-2024-0692

Severity

HIGH

CVSS

8.8

EPSS

0.92245

Risk score

67.49

CISA KEV

PoC

Published

2024-03-01

Modified

2025-04-16

First seen

2026-08-07

Aliases

EUVD-2024-16482, GHSA-3FJ5-F9X9-2HVX

Products

SolarWinds:Security Event Manager, SolarWinds:Security Event Manager 2023.4 and previous versions

Sources

euvd EUVD-2024-16482

Description

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

References

https://euvd.enisa.europa.eu/vulnerability/EUVD-2024-16482
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692
https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm