VulnerabilitycriticalExploited in the wild

New SolarWinds Serv-U vulnerability targeted in Log4j-related attacks

Help Net Securityby @zeljkazorzJan 20, 2022 · 00:00 UTC (Jan 20, 2022)1 min read2 · 1 read

Read at helpnetsecurity.com

Analyze CVE-2021-35247 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-35247 CVE-2021-35211

Tags: cve-2021-35247 cve-2021-35211 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35211	Unauthenticated RCE (Remote Memory Escape) in SolarWinds Serv-U	10.0	91%	KEVRansomware	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-35247	Actively Exploited Input Validation Flaw in SolarWinds Serv-U LDAP Login	5.3	3%	KEV	Jan 10, 2022 KEV Jan 21, 2022

From the original article

1 min read at helpnetsecurity.com

Attackers looking to exploit recently discovered Log4j vulnerabilities are also trying to take advantage of a previously undisclosed vulnerability in the SolarWinds Serv-U software (CVE-2021-35247). It affects version 15. 2.

Help Net Security

By @zeljkazorz · helpnetsecurity.com

Read the full article at Help Net Security

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.