Vulnerability · Published Aug 31, 2021 · Assigned by SolarWinds
CVE-2021-35223Execute Command Function Allows Remote Code Execution (RCE)Vulnerability
High 8.5
In plain English
A high-severity improper input validation in Serv-U from SolarWinds. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 2.9% (higher than 87% of all known vulnerabilities).
Severity (CVSS 3.1)8.5High
Exploit odds (30 days)2.9%top 12.8% of all CVEs
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| SolarWinds | Serv-U | 15.2.3 and previous versions – through 15.2.4 |
Weakness: CWE-20 · Vector: CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
References
- https://support.solarwinds.com/SuccessCenter/s/article/Execute-Command-Function-Allows-Remote-Code-Execution-RCE-Vulnerability-CVE-2021-35223?language=en_US x_refsource_MISC
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-4_release_notes.htm x_refsource_MISC
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35223 x_refsource_MISC