Microsoft discovers threat actor targeting SolarWinds Serv-U software with 0-day exploit

🗓️ 13 Jul 2021 22:30:17Reported by Eric AvenaType

mssecure

mssecure🔗 www.microsoft.com👁 212 Views

Microsoft detects 0-day exploit targeting SolarWinds Serv-U softwar

Reporter	Title	Published	Views	Family All 36
GithubExploit	Exploit for Out-of-bounds Write in Solarwinds Serv-U	14 Jan 202205:52	–	githubexploit
GithubExploit	Exploit for Out-of-bounds Write in Solarwinds Serv-U	30 Sep 202101:45	–	githubexploit
ATTACKERKB	CVE-2021-35211	13 Jul 202100:00	–	attackerkb
Information Security Automation	Last Week’s Security news: Exploits for ForgeRock, vSphere, Apache Tomcat, new Print Spooler vuln, Kaseya Patch and REvil, SolarWinds, Schneider Electric, Bulletins	19 Jul 202116:29	–	avleonov
BDU FSTEC	The vulnerability of the SSH protocol implementation in the SolarWinds Serv-U File Server file server for Windows operating systems allows a perpetrator to execute arbitrary code or escalate their privileges.	10 Aug 202100:00	–	bdu_fstec
Circl	CVE-2021-35211	13 Jul 202103:58	–	circl
CISA KEV Catalog	SolarWinds Serv-U Remote Code Execution Vulnerability	3 Nov 202100:00	–	cisa_kev
CISA	SolarWinds Releases Advisory for Serv-U Vulnerability	13 Jul 202100:00	–	cisa
CNNVD	SolarWinds Serv-U FTP Server 缓冲区错误漏洞	13 Jul 202100:00	–	cnnvd
Check Point Advisories	SolarWinds Serv-U Remote Code Execution (CVE-2021-35211)	5 Dec 202100:00	–	checkpoint_advisories

13 Jul 2021 22:30Current

9.7High risk

Vulners AI Score9.7

EPSS0.9116

microsoft solarwinds 0-day exploit serv-u software microsoft 365 defender cve-2021-35211 dev-0322 remote code execution china