Detections
Analytics
CVE-2024-28995
high
Description
SolarWinds Serv-U was susceptible to a directory transversal vulnerability that would allow access to read sensitive files on the host machine.
From the Tenable Blog
CVE-2024-28995: SolarWinds Serv-U Path/Directory Traversal Vulnerability Exploited in the Wild
Published: 2024-06-21
Following the publication of proof-of-concept exploit details for a high-severity flaw in SolarWinds Serv-U, researchers have observed both automated and manual in-the-wild exploitation attempts; patching is strongly advised.
References
https://www.securityweek.com/recent-adobe-commerce-vulnerability-exploited-in-wild/
https://www.labs.greynoise.io/grimoire/2024-06-solarwinds-serv-u/
https://support.solarwinds.com/SuccessCenter/s/article/Serv-U-15-4-2-Hotfix-2-Release-Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-28995