CVE-2020-10148 · Sandworm Watch

Nov 3, 2021high

CVE-2020-10148: SolarWinds Orion Authentication Bypass Vulnerability

SolarWinds Orion API contains an authentication bypass vulnerability that could allow a remote attacker to execute API commands. Required action: Apply updates per vendor instructions.

CVE-2020-10148EPSS 92.0%OrionSolarWinds

CISA KEV ↗ · unattributed attribution