CVSS 3.1 Score 7.9 of 10 (high)


Published Feb 15, 2024
Updated: Feb 20, 2024


CVE-2024-23477 is a vulnerability found in the SolarWinds Access Rights Manager (ARM) software, which could potentially allow an unauthenticated user to achieve remote code execution through a directory traversal attack. The vulnerability affects various versions of the ARM software, including uBKeEC, uBKeED, uBKeEA, tz88t7, uBKeEB, uBKeEG, uBKeEE, uBKeEF, ulsvtQ, uBKeD-, and uBKeD_. The risk score of this vulnerability is 68 out of 100, indicating a high severity level. To remediate the vulnerability and protect against potential attacks, organizations using affected versions of ARM should apply the necessary security patches or updates provided by SolarWinds. The danger posed by this vulnerability lies in the potential for unauthorized individuals to execute arbitrary code on affected systems, potentially leading to further compromise of sensitive data and network resources.

Explore Beyond the CVE Basics with Recorded Future's Vulnerability Intelligence

Note: This is just a basic overview providing quick insights into CVE-2024-23477 information. Gain full access to comprehensive CVE data, risk scores, prioritization, and mitigation data through Recorded Future's Vulnerability Intelligence:
  • Prioritize with Risk-Based Scoring
  • Explore the Extensive Vulnerability Database
  • Receive Early Alerts on Emerging CVEs
  • Focus on Critical Exploitable Vulnerabilities
  • Streamline Remediation with Integration Options