CVE-2024-28987

CriticalPublished

SolarWinds Web Help Desk Hardcoded Credential Vulnerability

Published: Aug 21, 2024
Updated: Oct 21, 2025
Assigning CNA: SolarWinds
Evidence observed: Oct 15, 2024

Primary CVSS

9.1/ 10Critical

nvd · CVSS 3.1

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N

EPSS probability estimate

93.3%

High · next 30 days

Percentile: 99.8%
Model date: Oct 19, 2026

EPSS is a statistical estimate, not a certainty or a measure of impact. Combine it with CVSS, KEV status, exposure and your environment.

CISA Known Exploited

This CVE appears in the CISA Known Exploited Vulnerabilities catalog.

Summary

The SolarWinds Web Help Desk (WHD) software is affected by a hardcoded credential vulnerability, allowing remote unauthenticated user to access internal functionality and modify data.

Sources

Repository evidence: Files: 2 · Repositories: 2

1 Module1 Template

SolarWinds Web Help Desk Backdoor (CVE-2024-28987)Module
modules/auxiliary/gather/solarwinds_webhelpdesk_backdoor.rb
Metasploit Framework modules
ResearchEvidence observed: Sep 25, 2026Revision: 1e321cedaf4cRelated tool
Declared conditions
- verification: check_declared($.auxiliary_gather/solarwinds_webhelpdesk_backdoor.check)
SolarWinds Web Help Desk - Hardcoded CredentialTemplate
http/cves/2024/CVE-2024-28987.yaml
Nuclei Templates
DetectionEvidence observed: Sep 26, 2026Revision: ee9e6969a9beRelated tool
Declared conditions
- network: http($.protocol_keys)
- verification: status,word($.matchers[*].type)

CVE-2024-28987

Responsible use

Use vulnerability information only on systems you own or are authorized to test. Kitploit links to public research metadata and does not store exploit code or malicious payloads.