CVE-2023-33224

HighCVSS 7.2

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

2.79%

85th percentile - higher than 85% of all known CVEs

Summary

The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Risk Assessment

This vulnerability poses a risk to organizations as it allows unauthorized command execution, potentially leading to serious security breaches.

Recommendation

It is recommended to update the SolarWinds platform to the latest version and restrict administrative access to the web console to trusted users.

Other vulnerabilities in SolarWinds Web Console

CVE-2023-33225High
The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS