Unscored severity · published Oct 15, 2015
CVE-2015-7840
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors…
–
CVSS
4.2%
EPSS
No
On KEV
Description
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
Exploitation
Is it being used?
Exploit prediction (EPSS)4.2% · higher than 91% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
LA
Log And Event Manager · Solarwinds
through 6.1 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2015-7840
CVE.org
https://www.cve.org/CVERecord?id=CVE-2015-7840
Vendor Advisory
http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
security.gentoo.org
https://security.gentoo.org/glsa/201603-11
More from Log And Event Manager
8.8
CVE-2017-5199
The editbanner feature in SolarWinds LEM (aka SIEM) through 6.3.1 allows remote authenticated users to execute arbitrary code by editing /usr/local/contego/scripts/mgrconfig.pl
8.8
CVE-2017-5198
SolarWinds LEM (aka SIEM) before 6.3.1 has an incorrect sudo configuration, which allows local users to obtain root access by editing /usr/local/contego/scripts/hostname.sh
–
CVE-2015-7839
SolarWinds Log and Event Manager (LEM) allows remote attackers to execute arbitrary commands on managed computers via a request to services/messagebroker/nonsecurestreamingamf…
–
CVE-2014-5504
SolarWinds Log and Event Manager before 6.0 uses "static" credentials, which makes it easier for remote attackers to obtain access to the database and execute arbitrary code via…