CVE-2021-25274

CVE-2021-25274 affects SolarWinds Orion Platform up to version 2020.2.4, specifically the Collector Service. The vulnerability arises because MSMQ private queues are not permissioned, allowing remote unauthenticated actors to send messages to TCP port 1801 that the Collector Service processes, co...

CVE-2021-25274

creationtimestamp| type| source ---|---|--- 2021-02-03 12:13:53+00:00| published-proof-of-concept| https://t.me/cKure/3819 2021-02-03 14:17:05+00:00| published-proof-of-concept| https://t.me/truesecator/1393 2021-02-08 09:06:16+00:00| seen| MISP/431b5ce3-4f3f-41ac-8d0d-3f30772012ff 2021-02-10...