Description
Solarwinds Web Help Desk 未授权 反序列化漏洞
Solarwinds Web Help Desk /helpdesk/WebObjects/Helpdesk.woa 存在反序列化漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://horizon3.ai/attack-research/cve-2025-40551-another-solarwinds-web-help-desk-deserialization-issue/
https://www.huntress.com/blog/active-exploitation-solarwinds-web-help-desk-cve-2025-26399
https://www.rapid7.com/blog/post/etr-multiple-critical-solarwinds-web-help-desk-vulnerabilities-cve-2025-40551-40552-40553-40554/
https://www.elastic.co/security-labs/solarwinds-whd-exploitation
https://nvd.nist.gov/vuln/detail/CVE-2025-40551
https://www.solarwinds.com/trust-center/security-advisories/cve-2025-40551
https://www.sonicwall.com/blog/multiple-vulnerabilities-in-solarwinds-web-help-desk-leading-to-rce-cve-2025-40551
https://labs.watchtowr.com/buy-a-help-desk-bundle-a-remote-access-solution-solarwinds-web-help-desk-pre-auth-rce-chain-s/
https://cloud.tencent.com/developer/article/2633214
https://www.rescana.com/post/solarwinds-web-help-desk-critical-vulnerabilities-unauthenticated-rce-and-authentication-bypass-fix