SolarWinds Serv-U FTP - Remote Code Execution
SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 contain a remote memory escape caused remote code execution vulnerability, letting attackers gain privileged access, exploit requires remote attacker to send crafted memory operations. References: https://github.com/BishopFox/CVE-2021-35211 https://www.rapid7.com/db/vulnerabilities/solarwinds-serv-u-cve-2021-35211/ https://www.microsoft.com/en-us/security/blog/2021/07/13/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit/ Remediation: Update to version 15.2.3 HF2 or later.
10 assets checked · domain, subdomain, ipv4