Product:
Web Help Desk
Summary
SolarWinds Web Help Desk was found to be susceptible to an untrusted data deserialization vulnerability that could lead to remote code execution. This vulnerability allows an attacker to run commands on the host machine without authentication.
Details
| Severity | Base Score | CVE |
|---|---|---|
| CRITICAL | 9.8 | CVE-2025-40553 |
Exploitation
An attacker can exploit this vulnerability by sending specially crafted data to the Web Help Desk application. Since the vulnerability does not require authentication, it can be easily exploited over the network, allowing the attacker to execute arbitrary commands on the affected system.
Affected Products
- Web Help Desk: Affected by an untrusted data deserialization vulnerability leading to potential remote code execution.
Mitigation
To mitigate this vulnerability, users should apply the latest security updates provided by SolarWinds. It is also recommended to implement network security measures to restrict access to the Web Help Desk application.