SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

Network monitoring services provider SolarWinds officially released a second hotfix to address a critical vulnerability in its Orion platform that was exploited to insert malware and breach public and private entities in a wide-ranging espionage campaign. In a new update posted to its advisory...

SolarWinds Issues Second Hotfix for Orion Platform Supply Chain Attack

Network monitoring services provider SolarWinds officially released a second hotfix to address a critical vulnerability in its Orion platform that was exploited to insert malware and breach public and private entities in a wide-ranging espionage campaign. In a new update posted to its advisory...

PT-2020-16129

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in SolarWinds N-Central, where the AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console NAC,...

CVE-2020-25621: Missing Authentication for Critical Function

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords...

CVE-2020-25620: Use of Hard-coded Credentials

An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named [email protected] and [email protected]. These allow logins to the N-Central Administrative Console NAC and/or the regular web interface...

CVE-2020-25622: Cross-Site Request Forgery (CSRF)

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF...

CVE-2020-25619: Undefined Security Weakness

An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature port forwarding with a temporary key pair to access network services on the 127.0.0.1 interface, even though thi...

PT-2020-16132

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in SolarWinds N-Central where hard-coded credentials exist by default for local user accounts named [email protected] and [email protected]. These credentials all...

PT-2020-16131

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in the SSH component of SolarWinds N-Central, where it does not restrict the communication channel to intended endpoints. This allows an attacker to leverage an SSH...

PT-2020-16133

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in the local database of SolarWinds N-Central, where security is only based on the ability to access a network interface, and authentication is not required. The...

SolarWinds N-Central 操作系统命令注入漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

SolarWinds N-Central 信任管理问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

SolarWinds N-Central 授权问题漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

PT-2020-16130

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in the sudo configuration of SolarWinds N-Central, which has incorrect access control. The nable web user account is effectively able to run arbitrary OS commands as...

CVE-2020-25617: Improper Limitation of a Pathname to a Restricted Directory

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console NAC, leading to execution of OS commands as root...

SolarWinds Orion Platform Installed (Windows)

Binary data solarwindsorioninstalled.nbin...

SolarWinds N-Central Security Vulnerability

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

SolarWinds N-Central 跨站请求伪造漏洞

SolarWinds N-Central is an IT device management platform from SolarWinds Singapore. The platform provides proactive monitoring of everything on a customer's network, not just servers and workstations, and rapid troubleshooting using features such as MFA, antivirus, integrated endpoint detection a...

PT-2020-16134

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670 Description An issue was discovered in the AdvancedScripts HTTP endpoint, which allows Cross-Site Request Forgery CSRF. This means that an attacker can trick a user into performing unintended actions on...

CVE-2020-25618: Improper Neutralization of Special Elements used in an OS Command

An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root i.e., the use of root privileges is not limited to specific programs listed in the sudoers fi...