CVE-2021-35247
Last modified
CVE-2021-35247 is a medium-severity vulnerability rated 5.3/10 on the CVSS scale. Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. CISA has confirmed active exploitation in the wild. EPSS estimates a 3.36% chance of exploitation in the next 30 days.
Description
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.
Metrics
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N
Exploitation Status
This vulnerability is listed in CISA’s Known Exploited Vulnerabilities catalog, confirming active exploitation in the wild. Federal agencies must remediate by .
Weakness Enumeration
Affected Software
| Vendor | Product | Versions |
|---|---|---|
| Solarwinds | Serv-U | < 15.3 |
References
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-3_release_notes.htmRelease Notes, Vendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35247Broken Link, Vendor Advisory
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-3_release_notes.htmRelease Notes, Vendor Advisory
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35247Broken Link, Vendor Advisory
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35247US Government Resource
Timeline
- Published
- Last Modified
- Status
- Analyzed
Frequently Asked Questions
What is CVE-2021-35247?
How severe is CVE-2021-35247?
How do I fix CVE-2021-35247?
How Strix Helps
- How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
- Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
- PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
- AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.
Related CVEs from 2021
- CVE-2021-35240A security researcher stored XSS via a Help Server setting. …4.8
- CVE-2021-35242Serv-U server responds with valid CSRFToken when the request…8.8
- CVE-2021-35243The HTTP PUT and DELETE methods were enabled in the Web Help…7.5
- CVE-2021-35244The "Log alert to a file" action within action management en…7.2
- CVE-2021-35245When a user has admin rights in Serv-U Console, the user can…6.8
- CVE-2021-35246The application fails to prevent users from connecting to it…5.3
- CVE-2021-35248It has been reported that any Orion user, e.g. guest account…4.3
- CVE-2021-35249This broken access control vulnerability pertains specifical…4.3
- CVE-2021-3525Rejected reason: DO NOT USE THIS CANDIDATE NUMBER. ConsultID…
- CVE-2021-35250A researcher reported a Directory Transversal Vulnerability …7.5
- CVE-2021-35251Sensitive information could be displayed when a detailed tec…5.3
- CVE-2021-35252Common encryption key appears to be used across all deployed…7.5
Are you affected by CVE-2021-35247?
Run a free Strix scan to check your systems for this vulnerability.
Scan your code nowSource: NVD / NIST