---
id: 4244
title: "[CVE-2017-7647] SolarWinds Log & Event Manager - Arbitrary Command Injection"
cve: CVE-2017-7647
source_domain: bishopfox.com
source_url: "https://bishopfox.com/blog/solarwinds-log-event-manager-aci-advisory"
published_at: "2017-05-12T00:00:00Z"
tags: ["advisory", "solarwinds", "command-injection", "cve-2017-7647", "lem"]
phying_url: "https://phying.com/item/4244"
lang: en
---

# [CVE-2017-7647] SolarWinds Log & Event Manager - Arbitrary Command Injection

## Summary

Advisory for an arbitrary command injection in SolarWinds Log & Event Manager (CVE-2017-7647): an authenticated user could escape the CMC console and run commands as root; fixed in 6.3.1 HF4.

## Intelligence Metadata

- **Sources:** bishopfox.com
- **CVE:** CVE-2017-7647
- **Published:** 2017-05-12T00:00:00Z
- **Original:** https://bishopfox.com/blog/solarwinds-log-event-manager-aci-advisory
- **Phying News:** https://phying.com/item/4244