CVE-2020-25619

An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwarding with a temporary key pair) to access network services on the 127.0.0.1 interface, even though this feature was only intended for user-to-agent communication.

• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory
• https://ernw.de/en/publications.htmlThird Party Advisory
• https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/Third Party Advisory
• https://support.solarwinds.com/SuccessCenter/s/Vendor Advisory

Published

Dec 16, 2020

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2020-25611The AWV portal of Mitel MiCollab before 9.2 could allow an a…6.1
• CVE-2020-25612The NuPoint Messenger of Mitel MiCollab before 9.2 could all…4.9
• CVE-2020-25613An issue was discovered in Ruby through 2.5.8, 2.6.x through…7.5
• CVE-2020-25614xmlquery before 1.3.1 lacks a check for whether a LoadURL re…9.8
• CVE-2020-25617An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25618An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-2562Vulnerability in the Primavera Portfolio Management product …6.1
• CVE-2020-25620An issue was discovered in SolarWinds N-Central 12.3.0.670. …7.8
• CVE-2020-25621An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.4
• CVE-2020-25622An issue was discovered in SolarWinds N-Central 12.3.0.670. …8.8
• CVE-2020-25623Erlang/OTP 22.3.x before 22.3.4.6 and 23.x before 23.1 allow…7.5
• CVE-2020-25624hw/usb/hcd-ohci.c in QEMU 5.0.0 has a stack-based buffer ove…5