Ransomwarecritical

Hackers Attempt to Exploit New SolarWinds Serv

The Hacker Newsby @TheHackersNewsJan 23, 2022 · 06:42 UTC (Jan 23, 2022)2 min read2 · 1 read

Read at thehackernews.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-35247 CVE-2021-35211

Tags: cve-2021-35247 cve-2021-35211 ransomware

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-35211	Unauthenticated RCE (Remote Memory Escape) in SolarWinds Serv-U	10.0	91%	KEVRansomware	Jul 14, 2021 KEV Nov 3, 2021
CVE-2021-35247	Actively Exploited Input Validation Flaw in SolarWinds Serv-U LDAP Login	5.3	3%	KEV	Jan 10, 2022 KEV Jan 21, 2022

From the original article

2 min read at thehackernews.com

Microsoft on Wednesday disclosed details of a new security vulnerability in SolarWinds Serv-U software that it said was being weaponized by threat actors to propagate attacks leveraging the Log4j flaws to compromise targets. Tracked as CVE-2021-35247 (CVSS score: 5.

The Hacker News

By @TheHackersNews · thehackernews.com

Read the full article at The Hacker News

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.