# CVE-2024-28986

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. While it was reported as an unauthenticated vulnerability, SolarWinds has been unable to reproduce it without authentication after thorough testing. However, out of an abundance of caution, we recommend all Web Help Desk customers apply the patch, which is now available.

- Page: https://www.vulneraibility.com/cve/CVE-2024-28986
- CVSS: 9.8
- Known exploited: yes, in CISA KEV since 2024-08-15; CISA due date 2024-09-05
- EPSS: 84.63% (percentile 99.7)
- Detection templates only, no public exploit found: 1 Nuclei template
- CISA SSVC: exploitation active, automatable yes, technical impact total (assessed 2024-08-15)
- Weakness: CWE-502
- Published: 2024-08-13

## Affected versions

- SolarWinds Web Help Desk: affected >= previous versions and <= 12.8.3

A version outside these ranges is not a statement that it is unaffected.

## References

- [other] https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28986
- [other] https://support.solarwinds.com/SuccessCenter/s/article/WHD-12-8-3-Hotfix-1
- [other] https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28986

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.