CVEブラウザに戻る

CVE-2015-7840

HIGH

7.5

CVSS Severity Score

EPSS Score0.0400%

EPSS Percentile4.66th

Published2015年10月15日

Last Modified2026年5月6日

Vulnerability Description

The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.

Affected Platforms (CPE)

📦

Solarwinds

Log And Event Manager

<= 6.1

References & Advisories

🔗 http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm

🔗 https://security.gentoo.org/glsa/201603-11

🔗 http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm

🔗 https://security.gentoo.org/glsa/201603-11

関連する脆弱性情報

CVE-2017-772210.0

In SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4, a menu system is encountered when the SSH service is accessed with ...

CVE-2017-76478.8

SolarWinds Log & Event Manager (LEM) before 6.3.1 Hotfix 4 allows an authenticated user to execute arbitrary commands.

CVE-2014-55047.5

SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access...

CVE-1999-05757.5

A Windows NT system's user audit policy does not log an event success or failure, e.g. for Logon and Logoff, File and Object Acces...