SolarWinds Serv-U Missing Validation Vulnerability Allowing Remote Code Execution

A remote code execution vulnerability has been identified in SolarWinds Serv-U due to a missing validation process. This issue can be exploited by a malicious actor with administrative privileges. On Windows deployments, the vulnerability is considered medium risk, as services typically run under less-privileged accounts by default.

Impact

Exploitation of this vulnerability allows for remote code execution on the affected system.

Remediation

Users can upgrade to SolarWinds Serv-U version 15.5.3, which addresses this vulnerability. The update is available on the SolarWinds website or through the Customer Portal.