SolarWinds Virtualization Manager vulnerabilities

3 CVEs affecting SolarWinds Virtualization Manager, 1 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2016-5709, published 2016-06-24.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2016-3643: SolarWinds Virtualization Manager Privilege Escalation Vulnerability, published 2016-06-17. High severity, CVSS 7.8. Actively exploited: in CISA KEV since 2021-11-03. EPSS: 3.7% chance of exploitation in the next 30 days. SolarWinds Virtualization Manager 6.3.1 and earlier allow local users to gain privileges by leveraging a misconfiguration of sudo, as demonstrated by "sudo cat /etc/passwd."
CVE-2016-3642, published 2016-06-17. Critical severity, CVSS 9.8. EPSS: 13.3% chance of exploitation in the next 30 days. The RMI service in SolarWinds Virtualization Manager 6.3.1 and earlier allows remote attackers to execute arbitrary commands via a crafted serialized Java object, related to the Apache Commons…
CVE-2016-5709, published 2016-06-24. Medium severity, CVSS 4.7. EPSS: 1.4% chance of exploitation in the next 30 days. SolarWinds Virtualization Manager 6.3.1 and earlier uses weak encryption to store passwords in /etc/shadow, which allows local users with superuser privileges to obtain user passwords via a brute…