CVE-2021-35247 KEV
4.3
MEDIUM · CVSS 3.1 · EPSS 3.5% (pctl 89)
Patch first
On CISA KEV — known exploited in the wild, due 2022-02-04.
Description
Serv-U web login screen to LDAP authentication was allowing characters that were not sufficiently sanitized. SolarWinds has updated the input mechanism to perform additional validation and sanitization. Please Note: No downstream affect has been detected as the LDAP servers ignored improper characters. To insure proper input validation is completed in all environments. SolarWinds recommends scheduling an update to the latest version of Serv-U.
Scoring
| CVSS | 4.3 (MEDIUM, v3.1) |
|---|---|
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N |
| EPSS | 3.45% — more likely to be exploited than 89% of all CVEs |
| Weakness | CWE-20 |
| On CISA KEV | yes — remediate by 2022-02-04 |
| Public exploit | none known |
| Published | 2022-01-10 |
| Last modified | 2026-06-17 |
CISA KEV
| Name | SolarWinds Serv-U Improper Input Validation Vulnerability |
|---|---|
| Added | 2022-01-21 |
| Due | 2022-02-04 |
| Vendor / product | SolarWinds / Serv-U |
| Ransomware use | none reported |
Affected (1)
| Vendor | Product |
|---|---|
| solarwinds | serv-u |
References
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35247
- https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-3_release_notes.htm
- https://www.solarwinds.com/trust-center/security-advisories/cve-2021-35247
- https://www.cisa.gov/known-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35247
→ the Explorer · watch your stack · NVD