Severity
High
Analysis Summary
CVE-2021-35254
SolarWinds Web Help Desk could allow a remote authenticated attacker to execute arbitrary code on the system, caused by improper input validation by the input fields. By sending a specially-crafted input, an attacker could exploit this vulnerability to execute arbitrary code on the system.
Impact
- Code Execution
Indicators Of Compromise
CVE
- CVE-2021-35254
Affected Vendors
SolarWinds
Affected Products
- SolarWinds Web Help Desk 12.7.8
Remediation
Upgrade to the latest version of Web Help Desk, available from the SolarWinds Web site.