CVE-2021-35211 · Severity: critical · CVSS 10 · Exploited in the wild · Published 2021-11-03
SolarWinds Serv-U Managed File Transfer and Secure FTP are vulnerable to a remote memory escape vulnerability that allows for remote code execution. An unauthenticated attacker can exploit this to gain privileged access to the host machine.
Yes. CVE-2021-35211 is known to be exploited in the wild, first recorded on 3 November 2021. Treat it as urgent.
How severe is CVE-2021-35211?
Critical severity, with a CVSS score of 10, published 3 November 2021.
Which products and versions are affected?
SolarWinds Serv-U Managed File Transfer before 15.2.3 HF2; SolarWinds Serv-U Secure FTP before 15.2.3 HF2.
Is there a fix for CVE-2021-35211?
A patch was published on 2021-07-14: NVD Published Date and SolarWinds advisory release Junglewise finds every place you run it, drafts the upgrade and applies it once you approve.
How is CVE-2021-35211 attacked?
It is attacked over the network, in a network appliance.
Am I affected by CVE-2021-35211?
Check whether you run SolarWinds Serv-U. Junglewise does that check for you around the clock: connect your code, cloud and domains, and it matches new vulnerabilities like this one against what you actually run and tells you when one reaches you.
Affected products
SolarWinds Serv-U Managed File Transfer before 15.2.3 HF2
SolarWinds Serv-U Secure FTP before 15.2.3 HF2
Timeline
2021-07-13: disclosed: Microsoft blog post regarding discovery of threat actor targeting Serv-U with 0-day exploit
2021-07-14: patched: NVD Published Date and SolarWinds advisory release
2021-11-03: kev added: Added to CISA Known Exploited Vulnerabilities Catalog