Network Configuration Manager
Vendor:
First CVE: Aug 7, 2014 · Active for 11 years
8
Total CVEs
More Total CVEs than 87% of tracked products
2.7
Avg CVEs / Year
Higher CVE frequency than 78% of tracked products
7.6
Avg CVSS
Higher Avg CVSS than 63% of tracked products
0.0%
KEV Rate
Bottom 1%
Trends Over Time
The number and severity of CVEs published that impact Network Configuration Manager over time
Volume of CVEsAvg CVSS Base Score
First CVE
Aug 7, 2014
11 years ago
Most Recent CVE
Nov 9, 2023
991 days ago
CVE Severity & Scoring
Network Configuration Manager8 CVEs
38%
63%
All CVEs352,785 CVEs
45%
40%
11%
MediumHigh
Attack Vector
Local0 (0.0%)
Network7 (87.5%)
Unknown1 (12.5%)
Physical0 (0.0%)
Adjacent Network0 (0.0%)
Attack Complexity
Low7 (87.5%)
High0 (0.0%)
Unknown1 (12.5%)
User Interaction
None7 (87.5%)
Unknown1 (12.5%)
Required0 (0.0%)
Privileges Required
Low5 (62.5%)
High2 (25.0%)
None0 (0.0%)
Unknown1 (12.5%)
Top CVEs
Signals from CVEs in this product scope (8 CVEs).
8 CVEs · Highest risk first
| CVE | Published | CVSS | Risk | KEV | Exploit |
|---|---|---|---|---|---|
CVE-2023-40054HIGH The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions w | Nov 9, 2023 | 8.8 | 27 | NO | NO |
CVE-2023-33227HIGH The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability This vulnerability allows a low level user to perform the actions wit | Nov 1, 2023 | 8.8 | 27 | NO | NO |
CVE-2023-33226HIGH The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions w | Nov 1, 2023 | 8.8 | 27 | NO | NO |
CVE-2023-40055HIGH The Network Configuration Manager was susceptible to a Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows a low-level user to perform the actions w | Nov 9, 2023 | 8.8 | 25 | NO | NO |
CVE-2021-35226MEDIUM An entity in Network Configuration Manager product is misconfigured and exposing password field to Solarwinds Information Service (SWIS). Exposed credentials are encrypted and requ | Oct 10, 2022 | 6.5 | 23 | NO | NO |
CVE-2014-3459MEDIUM Heap-based buffer overflow in SolarWinds Network Configuration Manager (NCM) before 7.3 allows remote attackers to execute arbitrary code via the PEstrarg1 property. | Aug 7, 2014 | 6.8 | 22 | NO | NO |
CVE-2023-23842HIGH The SolarWinds Network Configuration Manager was susceptible to the Directory Traversal Vulnerability. This vulnerability allows users with administrative access to SolarWinds Web | Jul 26, 2023 | 7.2 | 19 | NO | NO |
CVE-2023-33228MEDIUM The SolarWinds Network Configuration Manager was susceptible to the Exposure of Sensitive Information Vulnerability. This vulnerability allows users with administrative access to S | Nov 1, 2023 | 4.9 | 18 | NO | NO |
Exploit Exposure
Signals from CVEs in this product scope (8 CVEs).
CISA KEV
0 CVEs
0.0% of CVEs· Bottom 1%
Metasploit
0 CVEs
0.0% of CVEs· Bottom 1%
Nuclei
0 CVEs
0.0% of CVEs· Bottom 1%
ExploitDB
0 CVEs
0.0% of CVEs· Bottom 1%
Social Chatter
Signals from CVEs in this product scope (8 CVEs).
Media Mentions
Signals from CVEs in this product scope (8 CVEs).
Top CNAs Publishing CVEs For Network Configuration Manager
Top CWEs
Versions
| Version | CVE Count | Avg CVSS | Avg EPSS | KEV | Exploits |
|---|---|---|---|---|---|
| 7.2.1 | 1 | 6.8 | 11.6% | 0 | 0 |
| 7.2.0 | 1 | 6.8 | 11.6% | 0 | 0 |