PULSEUnderground Intel

AO VIVO24sinais / 24h

FEED

ransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technologyransomsilentransomgroup reclama a Smith, Gambrell & Russell, LLP · US · Professional Servicesransomsilentransomgroup reclama a W... R...ransomqilin reclama a Insurance Audit Services · US · Financial Servicesransomn0n reclama a Company #137 · CAransomn0n reclama a Company #136 · DKransomn0n reclama a Company #135 · IDransomn0n reclama a Company #134 · USransomn0n reclama a Company #133 · USransomredact reclama a Omni Hotels & Resorts · US · Hospitalityransomakira reclama a Westboro Partnersransomakira reclama a System Plus · Technologyransomakira reclama a David L Wade & Associates · Professional Servicesransomakira reclama a Source Energy Services · CA · Energy & Utilitiesransomaoqin reclama a Sistel · BR · Technology

← Todos os CVEs

CVE Watch—

CVE-2024-28995

SolarWinds Serv-U Path Traversal Vulnerability

CVSS

—

Sem CVSS

EPSS

99.6%

p100

KEV

SIM

17 de jul. de 2024

Exploit Today

80

0-100

Publicado: — · Última mod.: —

EPSS · 30d

99.6%EPSS · 30 dias99.6%

2026-10-082026-11-05

Ficha do catálogo KEV

Produto

SolarWinds / Serv-U

Vulnerabilidade

SolarWinds Serv-U Path Traversal Vulnerability

Adicionado ao KEV

17 de jul. de 2024

Corrigir até

7 de ago. de 2024

Uso conhecido em ransomware

Não

Descrição resumida

SolarWinds Serv-U contains a path traversal vulnerability that allows an attacker access to read sensitive files on the host machine.

Ação necessária

Apply mitigations per vendor instructions or discontinue use of the product if mitigations are unavailable.

Notas

https://www.solarwinds.com/trust-center/security-advisories/cve-2024-28995; https://nvd.nist.gov/vuln/detail/CVE-2024-28995

CVEs relacionados

CVECVSSEPSSKEVRExploitTítuloMod.

CVE-2026-283187.5 ALT

KEV—80SolarWinds Serv-U Uncontrolled Resource Consumption Vulnerability106d CVE-2021-35211—

KEV—80SolarWinds Serv-U Remote Code Execution Vulnerability—CVE-2021-35247—

KEV—77SolarWinds Serv-U Improper Input Validation Vulnerability—