N-able takes N-Central offline after dozens of zero-days published
Original title: N-able takes its remote access service offline after researcher publishes dozens of zero-day bugs
N-able told customers to shut down self-hosted N-Central and reports no evidence of successful exploitation.
Researcher Ben Bales posted the bugs on GitHub on Sunday without advance notice, naming the set Able2Shell. He described flaws that can steal credentials, create administrative accounts, and obtain root on affected N-able systems. Bales told Bleeping Computer he went public because N-able allegedly did not patch flaws reported in a different product. A spokesperson did not say whether the company can review logs for attacks.
Unconfirmed: Bales alleges N-able failed to patch a different product; N-able has not said whether it can detect exploitation.
- The hosted N-Central service is offline while N-able applies remediation.
- Customers were urged to take down self-hosted N-Central deployments.
- N-able said it has no evidence of successful exploitation.
- Customers cannot use N-Central to remotely manage devices during the outage.
Impact: Steal credentials, create admin accounts, and gain root
| Product | Affected |
|---|---|
| N-able N-Central | — |
- 1.Take self-hosted N-Central deployments offline, as N-able urged.
From the original article
1 min read at techcrunch.com
The remote access giant also urged its self-hosted customers to take down their own servers amid a "critical security incident," fearing the possibility of cyberattacks.
By Zack Whittaker · techcrunch.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.