CVE-2024-45711 — SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability

CVE-2024-45711

SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability PUBLISHED

Description (CNA)

SolarWinds Serv-U is vulnerable to a directory traversal vulnerability where remote code execution is possible depending on privileges given to the authenticated user. This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability

Affected (CNA)

Vendor / product	Versions
SolarWinds / Serv-U	affected Serv-U 15.4.2 HF 2 and previous versions

CWE

CWE-22

References

https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45711

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.