vulnerability
SolarWinds Serv-U: CVE-2021-35223: Execute Command Function Allows RCE Vulnerability
| Severity | CVSS | Published | Added | Modified |
|---|---|---|---|---|
| 7 | (AV:N/AC:L/Au:S/C:P/I:P/A:P) | Aug 20, 2021 | Aug 1, 2025 | Aug 1, 2025 |
Severity
7
CVSS
(AV:N/AC:L/Au:S/C:P/I:P/A:P)
Published
Aug 20, 2021
Added
Aug 1, 2025
Modified
Aug 1, 2025
Description
An attacker can abuse the FTP command SITE EXEC for command line obfuscation to conceal the payload which can launch remote code execution (RCE) from the Serv-U Server.
Solution
solarwinds-serv-u-upgrade-latest
NEW
Explore Exposure Command
Confidently identify and prioritize exposures from endpoint to cloud with full attack surface visibility and threat-aware risk context.