← CVE Radar
CVE-2021-35211Serv-U Remote Memory Escape Vulnerability
Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.
10.0 CRITICALEPSS 91.16%⚡ Known Exploited (CISA KEV)NVD: Analyzed
Overview
Severity
| Score | Severity | Version | Vector String |
|---|---|---|---|
| 10.0 | CRITICAL | 3.1NVD | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| 9.0 | CRITICAL | 3.1SolarWinds (CNA) | CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:C/C:H/I:H/A:H |
| 10.0 | HIGH | 2.0NVD | AV:N/AC:L/Au:N/C:C/I:C/A:C |
CISA required action
⚡ Known exploited · remediation due Nov 17, 2021
Apply updates per vendor instructions.
Details
- CVE ID
- CVE-2021-35211
- Status
- Analyzed
- Assigner (CNA)
- SolarWinds
- Published
- Jul 14, 2021
- Last modified
- 2026-06-17 03:57 UTC
- Weaknesses
Affected Products
As published by the CNA in the CVE record.
SolarWindsServ-U Managed File Transfer Server and Serv-U Secured FTP1 version range
- SolarWinds Serv-U before 15.2.3 HF1
References
- microsoft.com https://www.microsoft.com/security/blog/2021/07/13/microsoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit
- solarwinds.com https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211
- cisa.gov https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35211