Rewterz

Rewterz Threat Alert – Trickbot Malware- Active IOCs

July 13, 2021
Rewterz

Rewterz Threat Alert – Agent Tesla Malware – Active IOCs

July 13, 2021

Rewterz Threat Advisory – CVE-2021-35211 – SolarWinds Serv-U Managed File Transfer Server Vulnerability

Severity

High

Analysis Summary

CVE-2021-35211

SolarWinds Serv-U Managed File Transfer Server and Serv-U Secured FTP could allow a remote attacker to execute arbitrary code on the system, caused by an error when SSH is enabled in the environment. An attacker could exploit this vulnerability to install programs; view, change, or delete data; or run programs on the affected system.

Impact

  • Code Execution
  • Unauthorized Access

Affected Vendors

SolarWinds

Affected Products

  • SolarWinds Serv-U 15.2
  • SolarWinds Serv-U 15.2.2.573
  • SolarWinds Serv-U 15.2.3 HF1

Remediation

Apply the patch for this vulnerability (15.2.3 hotfix (HF) 2), available from the SolarWinds Web site.

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211

Reading this advisory was a good start.

Make it a habit.

Rewterz publishes threat advisories ahead of mainstream cybersecurity media, informed by an AI-Native Autonomous SOC that sees regional threat actor activity in real time. Subscribe to receive each new advisory as it publishes, plus a monthly Middle East threat landscape brief drawn from our own SOC telemetry. For teams evaluating their detection coverage, a 30-minute consultation with a senior analyst is also available, at your pace, when you're ready.