CVE-2021-25274

The Collector Service in SolarWinds Orion Platform before 2020.2.4 uses MSMQ (Microsoft Message Queue) and doesn't set permissions on its private queues. As a result, remote unauthenticated clients can send messages to TCP port 1801 that the Collector Service will process. Additionally, upon processing of such messages, the service deserializes them in insecure manner, allowing remote arbitrary code execution as LocalSystem.

• CWE-502

• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/Exploit, Patch, Third Party Advisory
• https://www.trustwave.com/en-us/resources/blogs/spiderlabs-blog/full-system-control-with-new-solarwinds-orion-based-and-serv-u-ftp-vulnerabilities/Exploit, Patch, Third Party Advisory

Published

Feb 3, 2021

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2021-25267Multiple XSS vulnerabilities in Webadmin allow for privilege…8.4
• CVE-2021-25268Multiple XSS vulnerabilities in Webadmin allow for privilege…8.4
• CVE-2021-25269A local administrator could prevent the HMPA service from st…4.4
• CVE-2021-25270A local attacker could execute arbitrary code with administr…6.7
• CVE-2021-25271A local attacker could read or write arbitrary files with ad…6
• CVE-2021-25273Stored XSS can execute as administrator in quarantined email…4.8
• CVE-2021-25275SolarWinds Orion Platform before 2020.2.4, as used by variou…7.8
• CVE-2021-25276In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a dire…7.1
• CVE-2021-25277FTAPI 4.0 - 4.10 allows XSS via a crafted filename to the al…6.1
• CVE-2021-25278FTAPI 4.0 through 4.10 allows XSS via an SVG document to the…4.8
• CVE-2021-25281An issue was discovered in through SaltStack Salt before 300…9.8
• CVE-2021-25282An issue was discovered in through SaltStack Salt before 300…9.1