SolarWinds Serv-U Type Confusion Remote Code Execution Vulnerability

A type confusion vulnerability in SolarWinds Serv-U allows a malicious actor to execute arbitrary native code as a privileged account. This vulnerability requires administrative privileges to exploit. On Windows deployments, the risk is considered medium, as services typically run under less-privileged accounts by default.

Impact

Exploitation of this vulnerability allows for arbitrary code execution with elevated privileges.