PT-2024-31733 · Solarwinds · Serv-U

Published

2024-09-04

·

Updated

2025-12-30

·

CVE-2024-45711

CVSS v3.1

8.8

High

VectorAV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions: SolarWinds Serv-U (affected versions not specified)
Description: The issue is a directory traversal vulnerability where remote code execution is possible depending on the privileges given to the authenticated user. This problem requires the user to be authenticated, and it occurs when the software environment variables are abused. Authentication is required for this vulnerability. There are approximately 2598 IPs found to be likely vulnerable to this issue, with the top location being the US.
Recommendations: At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2025-07025
CVE-2024-45711
ZDI-25-406

Affected Products

Serv-U