CVE-2021-35211
highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.912 · 100 %ileexploit · PoCEURUUSadded 2021-11-03remediate by 2021-11-17
required action Apply updates per vendor instructions.
EPSS · scored 2026-10-27
SolarWinds Serv-U Remote Code Execution Vulnerability
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode⚠ sources disagree · high–critical · 9–10
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
exploits (3)
Public proof-of-concept and weaponised exploit code.
- 0xhaggis/CVE-2021-35211Serv-U-FTP CVE-2021-35211 exploitPoC · poc_in_github
- BishopFox/CVE-2021-35211BishopFox/CVE-2021-35211PoC · poc_in_github
- NattiSamson/Serv-U-CVE-2021-35211Simple Serv-U CVE-2021-35211 PoCPoC · poc_in_github
affected products (4)
Products and version ranges known to be affected.
- SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTPSolarWinds Serv-U → 15.2.3 HF1enisa_euvdEU
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (10)
External citations — patches, advisories, analysis.
- https://nvd.nist.gov/vuln/detail/CVE-2021-35211cnnvd
- https://www.cybersecurity-help.cz/vdb/SB2021071315cnnvd
- https://www.microsoft.com/security/blog/2021/07/13/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploitcnnvd
- https://www.serv-u.com/Patchcnnvd
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211cnnvd
- https://www.microsoft.com/security/blog/2021/07/13/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploitenisa_euvd
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211enisa_euvd
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35211US Government Resourcenvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan