HTTP: SolarWinds Orion Platform RenderControl.aspx Insecure Deserialization

This signature detects attempts to exploit a known vulnerability against SolarWinds Orion Core Platform. A successful attack can lead to arbitrary code execution.

Extended Description

Insecure deserialization leading to Remote Code Execution was detected in the Orion Platform version 2020.2.5. Authentication is required to exploit this vulnerability.

Affected Products

Solarwinds orion_platform

Short Name
HTTP:CTS:SOLARWINDS-INSEC-DESER
Severity
Minor
Recommended
False
Recommended Action
Drop
Category
HTTP
Keywords
CVE-2021-35215 Deserialization Insecure Orion Platform RenderControl.aspx SolarWinds
Release Date
11/16/2021
Supported Platforms

srx-branch-12.3

srx-19.3

srx-branch-19.3

vsrx3bsd-19.2

srx-branch-19.4

vsrx-19.4

mx-12.3

mx-19.4

vmx-19.4

mx-19.3

vsrx3bsd-19.4

srx-19.4

vsrx-12.3

vmx-19.3

vsrx-19.2

srx-12.3

Sigpack Version
3565
False Positive
Unknown
Vendors

Solarwinds

CVSS Score

6.5

Found a potential security threat?