CVE-2024-28986
CRITICAL KEV NUCLEISolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
Title source: nucleiExploitation Summary
CVE-2024-28986 is actively exploited and listed in the CISA Known Exploited Vulnerabilities (KEV) catalog, added August 15, 2024. A Nuclei detection template is also available.
Description
SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.
Nuclei Templates (1)
SolarWinds Web Help Desk < 12.8.3 - Insecure Deserialization
CRITICALVERIFIEDby rxerium
Shodan:
http.favicon.hash:"1895809524"
References (3)
Core 3
Core References
Broken Link, Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1
US Government Resource
https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28986
Scores
CVSS v3
9.8
EPSS
0.7955
EPSS Percentile
99.1%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
active
Automatable
yes
Technical Impact
total
Details
CISA KEV
2024-08-15
VulnCheck KEV
2024-08-15
InTheWild.io
2024-08-15
ENISA EUVD
EUVD-2024-26048
CWE
CWE-502
Status
published
Products (2)
solarwinds/web_help_desk
12.8.3
solarwinds/web_help_desk
< 12.8.2
Published
Aug 13, 2024
KEV Added
Aug 15, 2024
Tracked Since
Feb 18, 2026