Context over chaos. Disconnected technologies, siloed data, and reactive processes can only get you so far. Protecting businesses in today’s threat landscape demands more than a set of security tools – it requires context.
That's where Avertium comes in
Security. It’s in our DNA. It’s elemental, foundational. Something that an always-on, everything’s-IoT-connected world depends on.
Helping mid-to-enterprise organizations protect assets and manage risk is our only business. Our mission is to make our customers’ world a safer place so that they may thrive in an always-on, connected world.
Best-in-class technology from our partners... backed by service excellence from Avertium.
Interested in becoming a partner?
With Avertium's deal registration, partners can efficiently and confidently connect with Avertium on opportunities to protect your deals.
Microsoft Copilot for Security analyzes and synthesizes high volumes of security data which can help healthcare cybersecurity teams do more with less.
Dive into our resource hub and explore top
cybersecurity topics along with what we do
and what we can do for you.
overview
Eight previously unknown vulnerabilities have been found within SolarWinds' Access Rights Manager Tool (ARM). Among these, three have been classified as critical, posing a substantial threat to unpatched systems. The critical vulnerabilities are as follows:
In these cases, insufficient data validation in the 'createGlobalServerChannelInternal,' 'OpenFile,' and 'OpenClientUpdateFile' methods allows attackers to execute code at the highest Windows privilege level (SYSTEM). Also, these three vulnerabilities don't require prior authentication.
A fix for these vulnerabilities has been released in the form of ARM version 2023.2.1. There are other vulnerabilities that also impact ARM but are not as severe as those previously mentioned.
Avertium strongly recommends that all users upgrade to ARM version 2023.2.1 as soon as possible. It’s important to be proactive and protect your systems and data.
INDICATORS OF COMPROMISE (IoCs)
At this time, there are no known IoCs associated with the above vulnerabilities. Avertium remains vigilant in locating IoCs for our customers. Should any be located, Avertium will disclose them as soon as possible. For more information on how Avertium can help protect your organization, please reach out to your Avertium Service Delivery Manager or Account Executive.
SUPPORTING DOCUMENTATION
ARM 2023.2.1 Release Notes (solarwinds.com)
ARM architecture and scalability (solarwinds.com)
Critical RCE flaws found in SolarWinds access audit solution (bleepingcomputer.com)
Critical SolarWinds RCE Bugs Enable Unauthorized Network Takeover (darkreading.com)
SolarWinds fixed three critical RCE flaws in its Access Rights Manager product (securityaffairs.com)