CVE-2015-7839

High

Published: 15/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.

Risk Assessment

Attackers can remotely take control of systems, leading to serious security breaches and data loss.

Recommendation

It is recommended to update SolarWinds LEM to the latest version and implement appropriate network security measures to restrict access to vulnerable services.

Other vulnerabilities in SolarWinds Log and Event Manager (LEM)

CVE-2015-7840High
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before version 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

Original NVD description (English source)