Product:
Web Help Desk
Summary
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution. This vulnerability allows an attacker to run commands on the host machine without authentication.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-40551 |
Exploitation
To exploit this vulnerability, an attacker can send specially crafted data to the Web Help Desk application, which will be deserialized by the application. This untrusted data can be manipulated to execute arbitrary code on the server, allowing the attacker to gain control over the host machine.
Affected Products
- Web Help Desk: Affected by the untrusted data deserialization vulnerability leading to potential remote code execution.
Mitigation
To mitigate this vulnerability, it is recommended to update the Web Help Desk to the latest version provided by SolarWinds. Additionally, implementing network security measures to restrict access to the application can help reduce the risk of exploitation.