CVE-2021-35245

HIGH

Serv-U Console - Privilege Escalation

Title source: llm

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

Core 2

Core References

Vendor Advisory x_refsource_misc

Release Notes, Vendor Advisory x_refsource_misc

CVSS v3 8.4

EPSS 0.0033

EPSS Percentile 56.2%

Attack Vector NETWORK

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:H/I:H/A:H

CWE

CWE-284

Status published

Products (3)

solarwinds/serv-u 15.2.4 hotfix1

solarwinds/serv-u 15.2.5

solarwinds/serv-u < 15.2.4

Published Dec 06, 2021

Tracked Since Feb 18, 2026