writeups.xyz / CVE-2022-38108: RCE In Solarwinds Network Performance Monitor

Submitter : c2a

Date: 28 February 2023

Bounty : undisclosed

Vulnerabilities :

• Insecure Deserialization
• RCE
• Security Code Review

Programs :

• SolarWinds

Authors :

• Piotr Bazydło (@Chudypb)
• Justin Hong
• Lucas Miller

Link :
https://www.zerodayinitiative.com/blog/2023/2/27/cve-2022-38108-rce-in-solarwinds-network-performance-monitor