April 4, 2025
Proactive Defense: The Importance of Incident Response Planning in Cybersecurity
Rewterz Threat Advisory – CVE-2022-22274 – SonicWall SonicOS Vulnerability
March 30, 2022Rewterz Threat Alert – Lokibot Malware – Active IOCs
March 30, 2022Rewterz Threat Advisory – CVE-2022-22274 – SonicWall SonicOS Vulnerability
March 30, 2022Rewterz Threat Alert – Lokibot Malware – Active IOCs
March 30, 2022
Severity
High
Analysis Summary
CVE-2021-35254
SolarWinds Web Help Desk could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper input validation by the input fields. By sending a specially-crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2021-35254
Affected Vendors
SolarWinds
Affected Products
- SolarWinds Web Help Desk 12.7.8
Remediation
Upgrade to the latest version of Web Help Desk, available from the SolarWinds Web site.