RCE in Solarwinds Server And Application Monitor

CVE-2015-1501

The factory.loadExtensionFactory function in TSUnicodeGraphEditorControl in SolarWinds Server and Application Monitor (SAM) allow remote attackers to execute arbitrary code via a UNC path to a crafted binary.

Vulnerability class: RCE (Remote Code Execution)

EPSS: 0.070 (93.5th percentile) — read the EPSS interpretation.

Affected products

Solarwinds Server_and_application_monitor
N/a — versions n/a

Weakness classification (CWE)

CWE-94 — Code Injection

References

cve@mitre.org (x_refsource_MISC)