Описание
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
Ссылки
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- PatchVendor Advisory
- US Government Resource
Уязвимые конфигурации
Одно из
EPSS
9 Critical
CVSS3
10 Critical
CVSS3
10 Critical
CVSS2
Дефекты
Связанные уязвимости
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
Уязвимость реализации протокола SSH файлового сервера SolarWinds Serv-U File Server операционных систем Windows, позволяющая нарушителю выполнить произвольный код или повысить свои привилегии
EPSS
9 Critical
CVSS3
10 Critical
CVSS3
10 Critical
CVSS2