critical10.0Public exploit code
CVE-2015-2284
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unsp…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- SolarWinds Firewall Security Manager 6.6.5 - Client Session Handling (Metasploit)2015-04-08 · remote · windows · Verified
Impact
userlogin.jsp in SolarWinds Firewall Security Manager (FSM) before 6.6.5 HotFix1 allows remote attackers to gain privileges and execute arbitrary code via unspecified vectors, related to client session handling.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Solarwinds | Firewall Security Manager | through 6.6.5 |