SolarWinds Serv-U Broken Access Control Remote Code Execution Vulnerability

A broken access control vulnerability in SolarWinds Serv-U allows an attacker with administrative privileges to create a system admin user and execute arbitrary code as a privileged account. This vulnerability can be exploited using domain admin or group admin privileges. On Windows deployments, the risk is considered medium, as services typically run under less-privileged accounts by default.

Impact

Exploitation of this vulnerability could lead to the creation of a system admin user and the execution of arbitrary code as a privileged account, potentially with root access.

Remediation

Users are advised to upgrade to Serv-U version 15.5.4, which addresses this vulnerability. For instructions on upgrading, see the SolarWinds Serv-U upgrade guide.