Impact
SolarWinds Web Help Desk suffers a denial-of-service flaw that can cause the server to crash due to insufficient memory when an attacker triggers the vulnerability. The exploit allows an adversary to interrupt legitimate user access, leading to a loss of availability for the impacted service.
Affected Systems
The vulnerability impacts SolarWinds Web Help Desk. No specific version information is provided, so all deployments of the product may be susceptible until the vendor releases a patched version.
Risk and Exploitability
The CVSS score of 8.2 indicates a high severity of the flaw, while no EPSS score is available and the issue is not included in the CISA KEV catalog. Although the exact attack vector is not detailed, the description implies that an attacker would need to send requests that exhaust the server’s memory resources, which is likely achievable over a network. Because the vulnerability leads to a crash rather than privilege escalation or data exposure, the primary risk is interruption of service.
OpenCVE Enrichment