← All advisories

High severity8.4NVD Advisory· Published Dec 6, 2021· Updated Jun 17, 2026

CVE-2021-35245

CVE-2021-35245

Description

When a user has admin rights in Serv-U Console, the user can move, create and delete any files are able to be accessed on the Serv-U host machine.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

6

SolarWinds/Serv-U MFT4 versions
cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*+ 3 more
- cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*range: <15.2.4
- cpe:2.3:a:solarwinds:serv-u:15.2.4:hotfix1:*:*:*:*:*:*
- cpe:2.3:a:solarwinds:serv-u:15.2.5:-:*:*:*:*:*:*
- (no CPE)
SolarWinds/Serv-U Consolellm-create
SolarWinds/Serv U File Servercpe-rescue
Range: 15.2.4 Hotfix 1 and previous versions

Patches

Vulnerability mechanics

References

2

documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-2-5_release_notes.htmnvdRelease NotesVendor Advisory
www.solarwinds.com/trust-center/security-advisories/CVE-2021-35245nvdVendor Advisory

News mentions

0

No linked articles in our index yet.