SolarWinds Network Performance Monitor is prone to a denial-of-service vulnerability.
Remote attackers may exploit this issue to cause denial-of-service conditions, denying service to legitimate users.
Information
SolarWinds Network Performance Monitor 12.0.15300.90
SolarWinds Network Performance Monitor 11.5
SolarWinds Network Performance Monitor 10.7
SolarWinds Network Performance Monitor 10.6.1
Exploit
The researcher has created a proof-of-concept to demonstrate the issue. Please see the references for more information.
References:
- [CVE-2017-9538] Persistent Application Denial of Service (Seclists.org)
- SolarWinds Homepage (SolarWinds)