Buy A Help Desk, Bundle A Remote Access Solution? (SolarWinds Web Help Desk Pre-Auth RCE Chain

WatchTowr Labs has uncovered a pre-authentication Remote Code Execution (RCE) chain in SolarWinds Web Help Desk, aptly describing it as turning the help desk solution into an unwitting remote access tool. This critical finding reportedly emerged while researchers were attempting to reproduce existing N-day exploits, leading to the identification of new (0-day) vulnerabilities within the product.

Technical Breakdown:

• Target: SolarWinds Web Help Desk
• Vulnerability Type: Pre-authentication Remote Code Execution (RCE) chain.
• Discovery Context: Researchers, while investigating known N-day vulnerabilities, identified an RCE chain involving previously undisclosed (0-day) flaws.
• Historical Note: SolarWinds Web Help Desk has a documented history of RCE opportunities and prior "in-the-wild exploitation."

Defense: Organizations utilizing SolarWinds Web Help Desk are strongly advised to consult the full WatchTowr Labs advisory for specific patching instructions and mitigation strategies to address this critical vulnerability promptly.

Source: https://labs.watchtowr.com/buy-a-help-desk-bundle-a-remote-access-solution-solarwinds-web-help-desk-pre-auth-rce-chain-s/