CVE-2017-7722

Critical

Published: 12/04/2017(UTC)Translated: 14/06/2026(UTC)NVD NIST

Summary

In SolarWinds Log & Event Manager (LEM) before version 6.3.1 Hotfix 4, accessing the menu system via the SSH service with default credentials 'cmc' and 'password' allows an attacker to exploit a vulnerability in the restrictssh feature. This enables the attacker to escape from the restricted shell.

Risk Assessment

Exploitation of this vulnerability could lead to unauthorized access to the system, posing a serious threat to the organization's data security.

Recommendation

It is recommended to upgrade to version 6.3.1 Hotfix 4 or later and to change the default credentials to minimize risk.

Original NVD description (English source)

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with "cmc" and "password" (the default username and password). By exploiting a vulnerability in the restrictssh feature of the menuing script, an attacker can escape from the restricted shell.