Skip to content
COOEY

EXPOSURES › CVE-2021-35211

CVE-2021-35211

CRITICAL ⌖ ON CISA KEV · EXPLOITED
DETAIL
SourceCISA-KEV · kev Published2021-11-03 Referencehttps://nvd.nist.gov/vuln/detail/CVE-2021-35211 ↗
⚡ RCE ◐ ZERO-DAY ⌖ EXPLOITED IN THE WILD SHAME 95/100 ransomwarerceexploited-in-wild

SolarWinds Serv-U contained a memory escape vulnerability enabling remote code execution and was actively exploited in the wild, linked to ransomware activity.

▸ RECOMMENDED ACTION  Actively exploited (CISA KEV) — remediate now, ahead of your normal patch cycle.

PLAYERS IMPLICATED
SolarWinds · vendorServ-U · product
DESCRIPTION

SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution.

SENTIMENT · TRUSTED SOURCES
synthesis severe-fallout -0.60
The vulnerability in SolarWinds Serv-U, allowing remote code execution via memory escape, represents a severe security failure with significant fallout, though the provided source is a neutral NVD ent
cooey ↗ severe-fallout +0.00
Neutral NVD entry; no sentiment toward vendor response.
"SolarWinds Serv-U contains an unspecified memory escape vulnerability which can allow for remote code execution."
AFFECTED FEDRAMP PRODUCTS · 0
No correlated FedRAMP products.