CVE-2021-25276 Privilege escalation in n/a

What is CVE-2021-25276?

CVE-2021-25276 is a high-severity vulnerability in Solarwinds Serv-U, published on 3 Feb 2021. It can only be exploited from the same machine or local network, with no action from the victim.

Official description

In SolarWinds Serv-U before 15.2.2 Hotfix 1, there is a directory containing user profile files (that include users' password hashes) that is world readable and writable. An unprivileged Windows user (having access to the server's filesystem) can add an FTP user by copying a valid profile file to this directory. For example, if this profile sets up a user with a C:\ home directory, then the attacker obtains access to read or replace arbitrary files with LocalSystem privileges.

Weakness: CWE-732

Which versions are affected by CVE-2021-25276?

It affects 1 product.

Products include Solarwinds Serv-U.

How do I fix CVE-2021-25276?

No fix has been published for CVE-2021-25276 yet. Limit exposure of the affected software until one is available.

Is CVE-2021-25276 being exploited?

There is no known exploitation of CVE-2021-25276 in the wild and no public exploit code.

Other vulnerabilities in Solarwinds Serv-U

• CVE-2021-35211 SolarWinds Serv-U Remote Code Execution Exploited Critical 9.0
• CVE-2024-28995 SolarWinds Serv-U Path Traversal Vulnerability Exploited High 8.6
• CVE-2026-28318 SolarWinds Serv-U Uncontrolled Resource Consumption Exploited High 7.5
• CVE-2021-35247 SolarWinds Serv-U Improper Input Validation Exploited Medium 4.3
• CVE-2020-35481 Code injection in n/a Critical 9.8

All Solarwinds Serv-U vulnerabilities

Sources

• CVE record
• NVD
• OSV
• GitHub advisory
• How this page is made

Also known as GHSA-j64g-p5ch-94rp.