Lucene search
HistoryApr 17, 2024 - 5:15 p.m.
CVE-2024-28073
solarwinds
serv-u
directory traversal
vulnerability
remote code
highly privileged account
CVSS3
8.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0
Percentile
10.5%
SolarWinds Serv-U was found to be susceptible to a Directory Traversal Remote Code Vulnerability. This vulnerability requires a highly privileged account to be exploited.
Related
vulnrichment
vulnrichment
cvelist
cvelist
nessus
nessus
SolarWinds Serv-U < 15.4.2 Directory Traversal (CVE-2024-28073)
2024-04-18 00:00:00
SolarWinds Serv-U 15.4.1.0 < 15.4.2
2024-04-18 00:00:00
cve
cve
CVE-2024-28073
2024-04-17 17:15:14
CVSS3
8.4
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
HIGH
User Interaction
REQUIRED
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H
AI Score
8.4
Confidence
High
EPSS
0
Percentile
10.5%
Related for NVD:CVE-2024-28073