CVE-2015-7840

High

Published: 15/10/2015(UTC)Translated: 16/06/2026(UTC)NVD NIST

Summary

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before version 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

Risk Assessment

Attackers can exploit this vulnerability to remotely execute code, potentially leading to system takeover or data leakage.

Recommendation

It is recommended to update SolarWinds Log and Event Manager to version 6.2.0 or later to mitigate this vulnerability.

Other vulnerabilities in SolarWinds Log and Event Manager (LEM)

CVE-2015-7839High
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf involving the traceroute functionality.

Original NVD description (English source)

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.