SolarWinds Serv-U Logic Error Vulnerability Allowing Remote Code Execution

A logic error vulnerability has been identified in SolarWinds Serv-U versions through 15.5.3. This vulnerability allows a malicious actor with administrative privileges to execute code. On Windows deployments, the risk is considered medium, as services typically run under less-privileged accounts by default.

Impact

Exploitation of this vulnerability could lead to unauthorized code execution on the server.

Remediation

Users can upgrade to SolarWinds Serv-U version 15.5.3, which addresses this vulnerability. For instructions on upgrading, see the SolarWinds Serv-U upgrade guide.