What’s Vulnerable › Vulnerabilities

CVE-2019-8917

• Severity: critical (CVSS 9.8 v3.0)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 36.4% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2019-02-18 · updated 2026-06-17

Description

SolarWinds Orion NPM before 12.4 suffers from a SYSTEM remote code execution vulnerability in the OrionModuleEngine service. This service establishes a NetTcpBinding endpoint that allows remote, unauthenticated clients to connect and call publicly exposed methods. The InvokeActionMethod method may be abused by an attacker to execute commands as the SYSTEM user.

Affected products

• SolarWinds Orion Network Performance Monitor: before 12.4 — fixed in 12.4

How to fix

Upgrade to a fixed version: SolarWinds Orion Network Performance Monitor 12.4. Check the vendor advisory for mitigations.

References

• http://www.securityfocus.com/bid/107061
• https://github.com/VerSprite/research/blob/master/advisories/VS-2019-001.md
• http://www.securityfocus.com/bid/107061
• https://github.com/VerSprite/research/blob/master/advisories/VS-2019-001.md

Get alerted when CVE-2019-8917 or the next vulnerability affects your stack