Local Access Vulnerability in SolarWinds Serv-U FTP Server

CVE-2018-19999

What is CVE-2018-19999?

The local management interface in SolarWinds Serv-U FTP Server 15.1.6.25 contains improper access controls that allow local users to bypass authentication. This oversight permits an attacker with local access to execute arbitrary code under the Windows SYSTEM account, potentially leading to escalation of privileges. To successfully exploit this vulnerability, an attacker must gain local access to the system where Serv-U is installed as well as ensure that a Serv-U administrator has an active management console session.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch →

References