CVE-2019-8917

CVE-2019-8917 is a critical remote code execution vulnerability affecting SolarWinds Orion Network Performance Monitor (NPM) versions prior to 12.4. The vulnerability resides in the OrionModuleEngine service, which exposes a NetTcpBinding endpoint allowing unauthenticated remote clients to invoke methods. An attacker can exploit the InvokeActionMethod to execute arbitrary commands with SYSTEM privileges. This vulnerability carries a CVSS score of 9.8 (Critical) due to its network-based attack vector, low attack complexity, and complete compromise of confidentiality, integrity, and availability. The EPSS score indicates a moderate likelihood of exploitation. While there is no evidence of active exploitation (not in KEV), and no public exploit intelligence (Metasploit, Nuclei, ExploitDB) or community discussion is available, the high FAUCET Risk Score of 97/100 suggests significant potential impact.