CVE-2024-0692

SolarWinds Security Event Manager Deserialization of Untrusted Data Remote Code Execution Vulnerability

The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.

Affected

SolarWinds · Security Event Manager

CVSS v3.1 NVD

8.8 HIGHCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

EPSS

92.25% chance of exploitation in the next 30 days, 100th percentile

Nuclei

high · CWE-502

Published

2024-03-01

Updated

2025-04-16

Proof-of-concept exploits (1)

• machevalia/CVE-2024-0692-SolarWinds-SEM-RCE0★ · 2026-01-13

Nuclei templates (1)

• projectdiscovery/nuclei-templates/blob/main/http/cves/2024/CVE-2024-0692.yaml

Security advisories

• https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-0692
• https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023…

References

• CVE Record
• NVD entry

Related

• CVE-2021-31630
• CVE-2025-14733