certfr_avis - certfr-2026-avi-1459

CERTFR-2026-AVI-1459

Vulnerability from certfr_avis

De multiples vulnérabilités ont été découvertes dans SolarWinds Dameware. Elles permettent à un attaquant de provoquer une exécution de code arbitraire à distance et un contournement de la politique de sécurité.

Solutions

Se référer au bulletin de sécurité de l'éditeur pour l'obtention des correctifs (cf. section Documentation).

SolarWinds indique que Dameware Remote Everywhere n'est pas affectée par la vulnérabilité CVE-2026-111497

Impacted products

	Vendor	Product	Description
	SolarWinds	Dameware	Dameware versions antérieures à 2026.3

References

Title

Publication Time

Tags

Bulletin de sécurité SolarWinds cve-2026-111497	2026-10-28	vendor-advisory
Bulletin de sécurité SolarWinds cve-2026-28335	2026-11-03	vendor-advisory
Bulletin de sécurité SolarWinds cve-2026-28336	2026-11-03	vendor-advisory
Bulletin de sécurité SolarWinds cve-2026-28327	2026-11-03	vendor-advisory

Show details on source website

JSON

To clipboard

{
  "$ref": "https://www.cert.ssi.gouv.fr/openapi.json",
  "affected_systems": [
    {
      "description": "Dameware versions ant\u00e9rieures \u00e0 2026.3",
      "product": {
        "name": "Dameware",
        "vendor": {
          "name": "SolarWinds",
          "scada": false
        }
      }
    }
  ],
  "affected_systems_content": "SolarWinds indique que Dameware Remote Everywhere n\u0027est pas affect\u00e9e par la vuln\u00e9rabilit\u00e9 CVE-2026-111497",
  "content": "## Solutions\n\nSe r\u00e9f\u00e9rer au bulletin de s\u00e9curit\u00e9 de l\u0027\u00e9diteur pour l\u0027obtention des correctifs (cf. section Documentation).",
  "cves": [
    {
      "name": "CVE-2026-28335",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28335"
    },
    {
      "name": "CVE-2026-28336",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28336"
    },
    {
      "name": "CVE-2026-28327",
      "url": "https://www.cve.org/CVERecord?id=CVE-2026-28327"
    }
  ],
  "initial_release_date": "2026-11-04T00:00:00",
  "last_revision_date": "2026-11-04T00:00:00",
  "links": [],
  "reference": "CERTFR-2026-AVI-1459",
  "revisions": [
    {
      "description": "Version initiale",
      "revision_date": "2026-11-04T00:00:00.000000"
    }
  ],
  "risks": [
    {
      "description": "Ex\u00e9cution de code arbitraire \u00e0 distance"
    },
    {
      "description": "Contournement de la politique de s\u00e9curit\u00e9"
    }
  ],
  "summary": "De multiples vuln\u00e9rabilit\u00e9s ont \u00e9t\u00e9 d\u00e9couvertes dans SolarWinds Dameware. Elles permettent \u00e0 un attaquant de provoquer une ex\u00e9cution de code arbitraire \u00e0 distance et un contournement de la politique de s\u00e9curit\u00e9.",
  "title": "Multiples vuln\u00e9rabilit\u00e9s dans SolarWinds Dameware",
  "vendor_advisories": [
    {
      "published_at": "2026-10-28",
      "title": "Bulletin de s\u00e9curit\u00e9 SolarWinds cve-2026-111497",
      "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-111497"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 SolarWinds cve-2026-28335",
      "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28335"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 SolarWinds cve-2026-28336",
      "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28336"
    },
    {
      "published_at": "2026-11-03",
      "title": "Bulletin de s\u00e9curit\u00e9 SolarWinds cve-2026-28327",
      "url": "https://www.solarwinds.com/trust-center/security-advisories/cve-2026-28327"
    }
  ]
}

CVE-2026-28335 (GCVE-0-2026-28335)

Vulnerability from cvelistv5

Published

2026-11-03 16:23

Modified

2026-11-04 04:56

Severity ?

8.4 (High) - CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L

CWE

CWE-20 - Improper Input Validation

Summary

SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.

References

URL

Tags

	https://https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm	release-notes
	https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28335	vendor-advisory

Impacted products

	Vendor	Product	Version
	SolarWinds	Dameware	Version: 0 <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28335",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-04T04:56:28.757Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Dameware",
          "vendor": "SolarWinds",
          "versions": [
            {
              "lessThanOrEqual": "2026.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Greg Bernatowicz on the Boeing Enterprise Security Red Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required.\u003c/span\u003e\u003cspan style=\"background-color: rgb(96, 96, 96);\"\u003e\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "SolarWinds Dameware was found to be affected by a buffer overflow vulnerability that can result in remote code execution. Authentication is required."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-253",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-253 Remote Code Inclusion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "HIGH",
            "attackVector": "NETWORK",
            "availabilityImpact": "LOW",
            "baseScore": 8.4,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:L",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T16:23:02.193Z",
        "orgId": "49f11609-934d-4621-84e6-e02e032104d6",
        "shortName": "SolarWinds"
      },
      "references": [
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28335"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "SolarWinds recommends customers to upgrade to Dameware 2026.3.1 as soon as is practical."
            }
          ],
          "value": "SolarWinds recommends customers to upgrade to Dameware 2026.3.1 as soon as is practical."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SolarWinds Dameware Buffer Overflow Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "49f11609-934d-4621-84e6-e02e032104d6",
    "assignerShortName": "SolarWinds",
    "cveId": "CVE-2026-28335",
    "datePublished": "2026-11-03T16:23:02.193Z",
    "dateReserved": "2026-02-26T14:47:03.211Z",
    "dateUpdated": "2026-11-04T04:56:28.757Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28327 (GCVE-0-2026-28327)

Vulnerability from cvelistv5

Published

2026-11-03 16:21

Modified

2026-11-04 04:56

Severity ?

8.2 (High) - CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-427 - Uncontrolled Search Path Element

Summary

SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.

References

URL

Tags

	https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm	release-notes
	https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28327	vendor-advisory

Impacted products

	Vendor	Product	Version
	SolarWinds	Dameware	Version: 0 <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28327",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-04T04:56:30.386Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Dameware",
          "vendor": "SolarWinds",
          "versions": [
            {
              "lessThanOrEqual": "2026.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Luiz Felipe Mol (Confu53)"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges.\u003c/span\u003e\u003cspan style=\"background-color: rgb(96, 96, 96);\"\u003e\u0026nbsp;\u003c/span\u003e\n\n\u003cbr\u003e"
            }
          ],
          "value": "SolarWinds Dameware was found to be affected by a DLL hijacking vulnerability. The hijack occurs during installations only and requires access to the local machine and admin privileges."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-175",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-175 Code Inclusion"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "LOCAL",
            "availabilityImpact": "HIGH",
            "baseScore": 8.2,
            "baseSeverity": "HIGH",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "REQUIRED",
            "vectorString": "CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-427",
              "description": "CWE-427 Uncontrolled Search Path Element",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T16:21:32.457Z",
        "orgId": "49f11609-934d-4621-84e6-e02e032104d6",
        "shortName": "SolarWinds"
      },
      "references": [
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28327"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "SolarWinds recommends customers to upgrade to Dameware 2026.3.1 as soon as is practical."
            }
          ],
          "value": "SolarWinds recommends customers to upgrade to Dameware 2026.3.1 as soon as is practical."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SolarWinds Dameware DLL Hijacking Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "49f11609-934d-4621-84e6-e02e032104d6",
    "assignerShortName": "SolarWinds",
    "cveId": "CVE-2026-28327",
    "datePublished": "2026-11-03T16:21:32.457Z",
    "dateReserved": "2026-02-26T14:47:03.211Z",
    "dateUpdated": "2026-11-04T04:56:30.386Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

CVE-2026-28336 (GCVE-0-2026-28336)

Vulnerability from cvelistv5

Published

2026-11-03 16:23

Modified

2026-11-04 04:56

Severity ?

9.9 (Critical) - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE

CWE-20 - Improper Input Validation

Summary

SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.

References

URL

Tags

	https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm	release-notes
	https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336	vendor-advisory

Impacted products

	Vendor	Product	Version
	SolarWinds	Dameware	Version: 0 <

Show details on NVD website

JSON

To clipboard

{
  "containers": {
    "adp": [
      {
        "metrics": [
          {
            "other": {
              "content": {
                "id": "CVE-2026-28336",
                "options": [
                  {
                    "Exploitation": "none"
                  },
                  {
                    "Automatable": "no"
                  },
                  {
                    "Technical Impact": "total"
                  }
                ],
                "role": "CISA Coordinator",
                "timestamp": "2026-11-03T00:00:00+00:00",
                "version": "2.0.3"
              },
              "type": "ssvc"
            }
          }
        ],
        "providerMetadata": {
          "dateUpdated": "2026-11-04T04:56:29.557Z",
          "orgId": "134c704f-9b21-4f2e-91b3-4a467353bcc0",
          "shortName": "CISA-ADP"
        },
        "title": "CISA ADP Vulnrichment"
      }
    ],
    "cna": {
      "affected": [
        {
          "defaultStatus": "affected",
          "product": "Dameware",
          "vendor": "SolarWinds",
          "versions": [
            {
              "lessThanOrEqual": "2026.3",
              "status": "affected",
              "version": "0",
              "versionType": "custom"
            }
          ]
        }
      ],
      "credits": [
        {
          "lang": "en",
          "type": "reporter",
          "user": "00000000-0000-4000-9000-000000000000",
          "value": "Greg Bernatowicz on the Boeing Enterprise Security Red Team"
        }
      ],
      "descriptions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "\u003cspan style=\"background-color: rgb(255, 255, 255);\"\u003eSolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required.\u003c/span\u003e\u003cspan style=\"background-color: rgb(96, 96, 96);\"\u003e\u0026nbsp;\u003c/span\u003e"
            }
          ],
          "value": "SolarWinds Dameware was found to be affected by a command injection vulnerability that could lead to the compromise of the remotely controlled host. Authentication is required."
        }
      ],
      "impacts": [
        {
          "capecId": "CAPEC-248",
          "descriptions": [
            {
              "lang": "en",
              "value": "CAPEC-248 Command Injection"
            }
          ]
        }
      ],
      "metrics": [
        {
          "cvssV3_1": {
            "attackComplexity": "LOW",
            "attackVector": "NETWORK",
            "availabilityImpact": "HIGH",
            "baseScore": 9.9,
            "baseSeverity": "CRITICAL",
            "confidentialityImpact": "HIGH",
            "integrityImpact": "HIGH",
            "privilegesRequired": "LOW",
            "scope": "CHANGED",
            "userInteraction": "NONE",
            "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H",
            "version": "3.1"
          },
          "format": "CVSS",
          "scenarios": [
            {
              "lang": "en",
              "value": "GENERAL"
            }
          ]
        }
      ],
      "problemTypes": [
        {
          "descriptions": [
            {
              "cweId": "CWE-20",
              "description": "CWE-20 Improper Input Validation",
              "lang": "en",
              "type": "CWE"
            }
          ]
        }
      ],
      "providerMetadata": {
        "dateUpdated": "2026-11-03T16:23:19.664Z",
        "orgId": "49f11609-934d-4621-84e6-e02e032104d6",
        "shortName": "SolarWinds"
      },
      "references": [
        {
          "tags": [
            "release-notes"
          ],
          "url": "https://documentation.solarwinds.com/en/success_center/dameware/content/release_notes/dameware_2026-3-1_release_notes.htm"
        },
        {
          "tags": [
            "vendor-advisory"
          ],
          "url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2026-28336"
        }
      ],
      "solutions": [
        {
          "lang": "en",
          "supportingMedia": [
            {
              "base64": false,
              "type": "text/html",
              "value": "SolarWinds recommends customers to upgrade to Dameware version 2026.3.1 as soon as is practical."
            }
          ],
          "value": "SolarWinds recommends customers to upgrade to Dameware version 2026.3.1 as soon as is practical."
        }
      ],
      "source": {
        "discovery": "EXTERNAL"
      },
      "title": "SolarWinds Dameware Command Injection Vulnerability",
      "x_generator": {
        "engine": "Vulnogram 0.1.0-dev"
      }
    }
  },
  "cveMetadata": {
    "assignerOrgId": "49f11609-934d-4621-84e6-e02e032104d6",
    "assignerShortName": "SolarWinds",
    "cveId": "CVE-2026-28336",
    "datePublished": "2026-11-03T16:23:19.664Z",
    "dateReserved": "2026-02-26T14:47:03.211Z",
    "dateUpdated": "2026-11-04T04:56:29.557Z",
    "state": "PUBLISHED"
  },
  "dataType": "CVE_RECORD",
  "dataVersion": "5.2"
}

Tags

Taxonomy of the tags.

All sightings related to this event Export sightings related to this event

Sightings

Author	Source	Type	Date

Nomenclature

Seen: The vulnerability was mentioned, discussed, or seen somewhere by the user.
Confirmed: The vulnerability is confirmed from an analyst perspective.
Published Proof of Concept: A public proof of concept is available for this vulnerability.
Exploited: This vulnerability was exploited and seen by the user reporting the sighting.
Patched: This vulnerability was successfully patched by the user reporting the sighting.
Not exploited: This vulnerability was not exploited or seen by the user reporting the sighting.
Not confirmed: The user expresses doubt about the veracity of the vulnerability.
Not patched: This vulnerability was not successfully patched by the user reporting the sighting.

Action not permitted

CERTFR-2026-AVI-1459

Vulnerability from certfr_avis

Solutions

CVE-2026-28335 (GCVE-0-2026-28335)

Vulnerability from cvelistv5

CVE-2026-28327 (GCVE-0-2026-28327)

Vulnerability from cvelistv5

CVE-2026-28336 (GCVE-0-2026-28336)

Vulnerability from cvelistv5

Tags

Sightings

Nomenclature