RCE in Solarwinds Log And Event Manager

CVE-2015-7839

SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.

Vulnerability class: Command Injection (OS Command Injection)

EPSS: 0.069 (93.4th percentile) — read the EPSS interpretation.