Summary
Ein Angreifer kann mehrere Schwachstellen in SolarWinds Serv-U ausnutzen, um beliebigen Programmcode mit Administratorrechten auszuführen.
Product
SolarWinds Serv-U ist eine FTP-Server Software.
Vulnerabilities 4
-
Critical 9.1
SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability
A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges. This issue requires a…
-
Critical 9.1
SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is score…
-
Critical 9.1
SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability
A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account. This issue requires administrative privileges to abuse. On Windows deployments, the risk is score…
-
Critical 9.1
SolarWinds Serv-U Insecure Direct Object Reference (IDOR) Remote Code Execution Vulnerability
An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account. This issue requires administrative privileges to abuse. On Windows deployments…
Revision history
-
#2
Referenz(en) aufgenommen: EUVD-2025-207543, EUVD-2025-207544, EUVD-2025-207545, EUVD-2025-207546
-
#1
Initiale Fassung
References
-
Serv-U 15.5.4 release notes vom 2026-02-23
https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-4_release_notes.htm