{
  "_links": {
    "capec": {
      "href": "/api/v1/vulnerability/cve-2024-0692/capec"
    },
    "cvss": {
      "href": "/api/v1/vulnerability/cve-2024-0692/cvss"
    },
    "cwe": {
      "href": "/api/v1/vulnerability/cve-2024-0692/cwe"
    },
    "enrichment": {
      "href": "/api/v1/vulnerability/cve-2024-0692/enrichment"
    },
    "gcve": {
      "href": "/api/v1/vulnerability/cve-2024-0692/gcve"
    },
    "self": {
      "href": "/api/v1/vulnerability/cve-2024-0692"
    },
    "sightings": {
      "href": "/api/v1/sightings/cve-2024-0692"
    }
  },
  "enrichments": {
    "cisa-kev": {
      "kev": false
    },
    "epss": {
      "epss": 0.92245,
      "kev": false,
      "percentile": 0.9982
    },
    "nuclei": {
      "nuclei": true,
      "nuclei_template": "http/cves/2024/CVE-2024-0692.yaml",
      "nuclei_template_severity": "high",
      "nuclei_template_yaml": "id: CVE-2024-0692\n\ninfo:\n  name: SolarWinds Security Event Manager - Unauthenticated RCE\n  author: DhiyaneshDK\n  severity: high\n  description: |\n    The SolarWinds Security Event Manager was susceptible to Remote Code Execution Vulnerability. This vulnerability allows an unauthenticated user to abuse SolarWinds’ service, resulting in remote code execution.\n  impact: |\n    Unauthenticated attackers on the adjacent network can execute arbitrary code remotely on the SolarWinds Security Event Manager, leading to complete system compromise and potential access to all security event data.\n  remediation: |\n    Upgrade to SolarWinds Security Event Manager version 2023.4.1 or later.\n  reference:\n    - https://documentation.solarwinds.com/en/success_center/sem/content/release_notes/sem_2023-4-1_release_notes.htm\n  classification:\n    cvss-metrics: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H\n    cvss-score: 8.8\n    cve-id: CVE-2024-0692\n    cwe-id: CWE-502\n    epss-score: 0.92245\n    epss-percentile: 0.99819\n    cpe: cpe:2.3:a:solarwinds:security_event_manager:*:*:*:*:*:*:*:*\n  metadata:\n    verified: true\n    max-request: 2\n    vendor: solarwinds\n    product: security_event_manager\n    fofa-query: title=\"SolarWinds Security Event Manager\"\n  tags: cve,cve2024,solarwinds,event-manager,cisa,vkev,vuln\n\nhttp:\n  - raw:\n      - |\n        GET /webui/ HTTP/1.1\n        Host: {{Hostname}}\n\n    matchers:\n      - type: word\n        part: body\n        words:\n          - \"SolarWinds Security Event Manager\"\n        internal: true\n\n  - raw:\n      - |\n        POST /services/messagebroker/streamingamf HTTP/1.1\n        Host: {{Hostname}}\n        Content-Type: application/x-amf\n\n        abc\n\n    matchers:\n      - type: dsl\n        dsl:\n          - 'status_code == 200'\n          - 'contains(content_type, \"application/x-amf\")'\n          - 'contains(body, \"AMF version\")'\n        condition: and\n# digest: 4a0a0047304502205b40d9c2fca9e410a04b0ed9ebf5c01358b23085322e34b3ef1eb44c3cc65a830221009f7abc3668a99390a5ad9e9de5b83001e063e411172c70d6479395b7a114e4e0:922c64590222798bb761d5b6d8e72950"
    }
  },
  "vuln_id": "cve-2024-0692"
}