Vulnerabilitycritical

Three More Vulnerabilities Found in SolarWinds Products

Infosecurity Magazineby Phil MuncasterFeb 4, 2021 · 11:35 UTC (Feb 4, 2021)1 min read1 · 1 read

Read at infosecurity-magazine.com

Analyze CVE-2021-25274 with Vani AIImpact, affected versions, exploitation, mitigations and detection

CVEs: CVE-2021-25274 CVE-2021-25275 CVE-2021-2527

Tags: cve-2021-25274 cve-2021-25275 cve-2021-2527 vulnerability

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-25274 +1 related CVE CVE-2021-25275	The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues	9.8 group max	36%	PoC	Feb 3, 2021

From the original article

1 min read at infosecurity-magazine.com

Security researchers have discovered three more vulnerabilities in SolarWinds products, including a critical remote code execution bug. The IT management software provider has been in the news regularly over recent weeks after its Orion product was targeted by alleged Russian state hackers , in a major supply chain attack aimed at the US government.

Infosecurity Magazine

By Phil Muncaster · infosecurity-magazine.com

Read the full article at Infosecurity Magazine

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.