SolarWinds Platform (Orion)
CVE-2021-35244: Unrestricted File Upload Causing Remote Code Execution: Orion Platform 2020.2.6
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Orion Platform (Windows) 2020.2 | 2020.2.6 HF 3 or later |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The "Log alert to a file" action within action management enables any Orion Platform user with Orion alert management rights to write to any file. An attacker with Orion alert management rights could use this vulnerability to perform an unrestricted file upload causing a remote code execution.
Workarounds
If you are unable to upgrade immediately. See SolarWinds Knowledgebase Article Below: https://support.solarwinds.com/SuccessCenter/s/article/Mitigate-the-Unrestricted-File-Upload-Causing-Remote-Code-Execution-Vulnerability-CVE-2021-35244
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.