PT-2024-4165 · Solarwinds · Solarwinds Serv-U

Hussein Daher · Published 2024-06-06 · Updated 2026-02-26 · CVE-2024-28995

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions SolarWinds Serv-U versions 15.4.2 and earlier

Description SolarWinds Serv-U was susceptible to a directory traversal vulnerability that would allow access to read sensitive files on the host machine. Threat actors are actively exploiting this issue in the wild, with public exploits available.

Recommendations SolarWinds Serv-U versions prior to 15.4.2: Update to version 15.4.2 or a later version to resolve this issue.

Exploit

Fix

DoS

RCE

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2024-04650

CVE-2024-28995

Affected Products

Solarwinds Serv-U

References · 83

• 🔥 https://github.com/rapid7/metasploit-framework/blob/master/modules/auxiliary/gather/solarwinds_servu_fileread_cve_2024_28995.rb · Exploit
• 🔥 https://github.com/Stuub/CVE-2024-28995 · Exploit
• 🔥 https://github.com/bigb0x/CVE-2024-28995 · Exploit
• 🔥 https://github.com/krypton-kry/CVE-2024-28995 · Exploit
• 🔥❌ https://github.com/karkis3c/cves · Exploit, Deleted
• 🔥 https://exploit-db.com/exploits/52311 · Exploit
• https://nvd.nist.gov/vuln/detail/CVE-2024-28995 · Security Note
• https://solarwinds.com/trust-center/security-advisories/CVE-2024-28995 · Vendor Advisory
• https://solarwinds.com/trust-center/security-advisories/cve-2024-28995 · Security Note
• https://bdu.fstec.ru/vul/2024-04650 · Security Note
• https://osv.dev/vulnerability/CVE-2024-28995 · Vendor Advisory
• https://twitter.com/Alevskey/status/1804795405495878061 · Twitter Post
• https://twitter.com/r1cksec/status/1801326148116459834 · Twitter Post
• https://twitter.com/transilienceai/status/1808866506354078186 · Twitter Post
• https://t.me/cybersecuritytechnologies/10682 · Telegram Post