CVE•Published 2025-09-01•1 article on news•7 live references•NVD data

CVE-2024-28988

Vulnerability data via CVEDB (Shodan)

CVSS v3.1

9.8

CRITICAL

EPSS percentile

Exploit Prediction Scoring System · top 2% of all CVEs

Description

SolarWinds Web Help Desk was found to be susceptible to a Java Deserialization Remote Code Execution vulnerability that, if exploited, would allow an attacker to run commands on the host machine. This vulnerability was found by the ZDI team after researching a previous vulnerability and providing this report. The ZDI team was able to discover an unauthenticated attack during their research. We recommend all Web Help Desk customers apply the patch, which is now available. We thank Trend Micro Zero Day Initiative (ZDI) for its ongoing partnership in coordinating with SolarWinds on responsible disclosure of this and other potential vulnerabilities.

Timeline

Published 2025-09-01

External references

NVD MITRE Exploit-DB GitHub PoC Sploitus trickest/cve VulnCheck

Search for exposed instances

Shodan + Censys queries derived from NVD's CPE data. The vuln tag catches assets Shodan has explicitly linked to this CVE; the product / banner fingerprints find exposed instances even when the vuln tag was never applied (which is common).

Shodan · vuln tag0 hosts

vuln:CVE-2024-28988

Hosts Shodan has explicitly fingerprinted as vulnerable.

Shodan · product

product:"Solarwinds Web Help Desk"

All exposed Solarwinds Web Help Desk instances — cross-reference with the CVE's affected-version range.

Shodan · banner/body mention

http.html:"Web Help Desk"

HTTP body or banner mentions "Web Help Desk" — catches deploys Shodan didn't identify as a product.

More intel sources (5)

Shodan report

vuln:CVE-2024-28988