CVE-2015-7840

EUVD-2015-7738
The command line management console (CMC) in SolarWinds Log and Event Manager (LEM) before 6.2.0 allows remote attackers to execute arbitrary code via unspecified vectors involving the ping feature.
ProviderTypeBase ScoreAtk. VectorAtk. ComplexityPriv. RequiredVector
NISTPrimary
7.5 UNKNOWN
NETWORK
LOW
AV:N/AC:L/Au:N/C:P/I:P/A:P
Base Score
CVSS 3.x
EPSS Score
Percentile: 95%
Affected Products (NVD)
VendorProductVersion
solarwindslog_and_event_manager
𝑥
≤ 6.1
𝑥
= Vulnerable software versions
Common Weakness Enumeration
References
http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
https://security.gentoo.org/glsa/201603-11
http://www.solarwinds.com/documentation/lem/docs/releasenotes/releasenotes.htm
https://security.gentoo.org/glsa/201603-11