CVE-2024-28987
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
Attack profile
How easy it is to exploit
- Attack vector
- Network
- Complexity
- Low
- Privileges needed
- None
- User interaction
- None
What an attacker can affect
- Confidentiality
- High
- Integrity
- High
- Availability
- None
Exploit likelihood
What each source reports
CVE List Score used
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- Record
CVE-2024-28987- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-798
- Updated
- 2026-11-02
EUVDEUVD-2024-26049
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- Record
EUVD-2024-26049- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Updated
- 2026-11-02
GitHub AdvisoriesGHSA-4jq7-4qmf-m333
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability,...
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- Record
GHSA-4jq7-4qmf-m333- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-798
- Updated
- 2026-11-02
CISA KEV No score
SolarWinds Web Help Desk Hardcoded Credential Vulnerability
SolarWinds Web Help Desk contains a hardcoded credential vulnerability that could allow a remote, unauthenticated user to access internal functionality and modify data.
- Record
CVE-2024-28987- Weakness
- CWE-798
- Updated
- 2026-11-02
NVD
The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.
- Record
CVE-2024-28987- CVSS 3.1
- 9.1 Critical
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N - Weakness
- CWE-798
- Updated
- 2026-11-02
Affected products
Public exploits
Links only. Every CVE stores no exploit code.
| Source | Link | Date |
|---|---|---|
| PoC in GitHub | gh-ost00/CVE-2024-28987-POC | 2024-09-05 |
| PoC in GitHub | horizon3ai/CVE-2024-28987 | 2024-09-24 |
| PoC in GitHub | alecclyde/CVE-2024-28987 | 2025-04-21 |
| PoC in GitHub | Darabium/CVE-2024-28987 | 2026-07-28 |
| Metasploit | SolarWinds Web Help Desk Backdoor (CVE-2024-28987) | 2024-08-22 |
| Nuclei | SolarWinds Web Help Desk - Hardcoded Credential |
History
| Recorded | Changed | Sources |
|---|---|---|
| exploitation, exploits | ||
| first indexed | CVE List, EUVD, GitHub Advisories, CISA KEV, Metasploit, Nuclei, NVD, PoC in GitHub |
Dates are when Every CVE recorded each change. Upstream dates may differ.
In short
CVE-2024-28987 is a critical vulnerability (CVSS 9.1) in Solarwinds Web Help Desk, published August 21, 2024. CISA lists it as known to be exploited, since October 15, 2024. EUVD reports exploitation since October 15, 2024. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 93.3%, the 99th percentile. No source names a fixed version.
References
solarwinds.com/trust-center/security-advisories/cve-2024-28987
support.solarwinds.com/SuccessCenter/s/article/SolarWinds-Web-Help-Desk-12-8-3-Hotfix-2
cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2024-28987
theregister.com/2024/08/22/hardcoded_credentials_bug_solarwinds_whd
nvd.nist.gov/vuln/detail/CVE-2024-28987
github.com/advisories/GHSA-4jq7-4qmf-m333