Threat Actors are actively exploiting a SolarWinds Zero-Day Vulnerability

THREAT LEVEL: Amber.

For a detailed advisory, download the pdf file here.

A zero-day vulnerability (CVE-2021-35211) that impacts the Serv-U Managed File Transfer and Serv-U Secure FTP, is been exploited by multiple threat actors. The PoC of this exploited vulnerability was given to SolarWinds by Microsoft. SolarWinds has released a patch for the same.

Vulnerability Details

Indicator of Compromise

Patch Link

https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35211

References

https://www.rapid7.com/blog/post/2021/07/12/solarwinds-serv-u-ftp-and-managed-file-transfer-cve-2021-35211-what-you-need-to-know/

https://thehackernews.com/2021/07/a-new-critical-solarwinds-zero-day.html