CVE-2023-33225

HighCVSS 7.2

Published: 26/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

High risk

3.32%

87th percentile - higher than 87% of all known CVEs

Summary

The SolarWinds Platform was susceptible to the Incorrect Comparison Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with SYSTEM privileges.

Risk Assessment

This vulnerability poses a serious risk to organizations as it allows unauthorized execution of commands with elevated privileges, potentially leading to system takeover.

Recommendation

It is recommended to immediately update the SolarWinds platform to the latest version to mitigate this vulnerability and restrict access to the console to trusted administrators.

Other vulnerabilities in SolarWinds Web Console

CVE-2023-33224High
The SolarWinds Platform was susceptible to the Incorrect Behavior Order Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web Console to execute arbitrary commands with NETWORK SERVICE privileges.

Original NVD description (English source)

Vulnerability data from NVD (NIST) · CISA KEV · EPSS