CVEvulnerability
CVE-2015-7840
7.5 HIGH
Official page ↗
- Status
- Modified
- Published
- 2015-10-15
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
Affected configurations
• solarwinds log and event manager (<= 6.1)
Related
Weakness · not in database (1)
References
- http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm Vendor Advisory
- https://security.gentoo.org/glsa/201603-11 security.gentoo.org
- http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm Vendor Advisory
- https://security.gentoo.org/glsa/201603-11 security.gentoo.org