WID-SEC-W-2024-0917

DeutschShown in its original language — a full translation is planned for a future version.

SolarWinds Serv-U Managed File Transfer Server: Schwachstelle ermöglicht Codeausführung

view advisory published 2024-04-17

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in SolarWinds Serv-U Managed File Transfer Server ausnutzen, um beliebigen Programmcode auszuführen.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2024-28073US	high7.2	1.12% (66th)	—	2024-04-17
SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.

references

External citations — patches, advisories, analysis.

GitHub Advisory Database vom 2024-04-17external
WID-SEC-W-2024-0917 - CSAF Versionself
WID-SEC-2024-0917 - Portal Versionself
SolarWinds Trust Center Security Advisories vom 2024-04-17external

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan