ZeroDay Findings
Sign inSign up

Findings

CVE-2024-28986

SolarWinds Web Help Desk Deserialization of Untrusted Data Vulnerability

Published Aug 13, 2024 · updated Jun 17, 2026 · solarwinds web help desk

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

Timeline

Detection, updates, and resolution for this record.

  1. Aug 13, 2024 · Catalog

    Detected

    SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend a

  2. Aug 15, 2024 · CISA KEV

    Known exploited

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  3. Sep 5, 2024 · CISA KEV

    Remediation due

    Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

  4. Jun 17, 2026 · Catalog

    Updated

    SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend a

Required action

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

CISA due date Sep 5, 2024

Affected

  • cpe solarwinds/web help deskversion unspecified
  • cpe solarwinds/web help desk12.8.3
  • vendor SolarWinds Web Help Deskversion unspecified

Sources

  • CISA KEVCVE-2024-28986

    SolarWinds Web Help Desk contains a deserialization of untrusted data vulnerability that could allow for remote code execution.

    cisa.gov
  • CVE.orgCVE-2024-28986

    Official CVE identifier

    cve.org
  • FIRST EPSSCVE-2024-28986

    30-day exploitation probability 84.6%

    first.org
  • NIST NVDCVE-2024-28986

    SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been una

    nvd.nist.gov

References