exploit/windows/misc/solarwinds_amqp_deserialization

weaponized

SolarWinds Information Service (SWIS) .NET Deserialization From AMQP RCE

view exploit source metasploittype exploitpublished 2022-10-19catalog metasploit

exploited CVEs (1)

Known CVEs related to this entry.

ID	severity	EPSS	exploitable	published
CVE-2022-38108US	high7.2	65.9% (99th)	Exploit	2022-10-20
SolarWinds Platform was susceptible to the Deserialization of Untrusted Data. This vulnerability allows a remote adversary with Orion admin-level account access to SolarWinds Web C…

scry

Working exploits like this target internet-facing systems. See what is exposed on your perimeter with a free passive scan.