CVE-2019-12181: solarwinds serv-u ftp server – CVSS 8.8 · Watchpost

← All vulnerabilities

CVE-2019-12181

ALTO 8.8CVE-2019-12181 · Published 17/06/2019 · updated 17/06/2026

Em resumo

CVE-2019-12181 é uma vulnerabilidade ALTO (CVSS 8.8) que afeta serv-u ftp server (solarwinds), serv-u mft server (solarwinds).
Chance de exploração nos próximos 30 dias (EPSS): 65.4%, maior que 99.3% das vulnerabilidades.
Correção: atualize para 15.1.7 ou posterior.

Package	Affected versions	Patched versions
serv-u ftp server solarwinds	`< 15.1.7`	`15.1.7`
serv-u mft server solarwinds	`< 15.1.7`	`15.1.7`

Description

A privilege escalation vulnerability exists in SolarWinds Serv-U before 15.1.7 for Linux.

References

packetstormsecurity.com/files/153333/Serv-U-FTP-Server-15.1.6-Privilege-Escalation.html · Exploit
packetstormsecurity.com/files/153505/Serv-U-FTP-Server-prepareinstallation-Privilege-Escalation.html · Exploit
blog.vastart.dev/2019/06/cve-2019-12181-serv-u-exploit-writeup.html · Broken Link
documentation.solarwinds.com/en/success_center/servu/Content/Release_Notes/Servu_15-1-7_release_notes.htm · Release Notes
support.solarwinds.com/SuccessCenter/s/article/Serv-U-Potential-elevation-of-privileges-on-Linux-systems · Vendor Advisory

Mais vulnerabilidades de serv-u ftp server

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free