SolarWinds Security Updates – 16 October 2024

The addressed vulnerabilities could allow the attacker to gain elevated privilege, obtain sensitive information, or perform cross-site scripting attacks on the affected system.

Sample of the addressed vulnerabilities:

1. SolarWinds Platform Uncontrolled Search Path Element Local Privilege Escalation Vulnerability (CVE-2024-45710):

• CVSS: 7.8
• Attack Vector: Local
• Attack Complexity: Low
• Privileges Required: Low
• User Interaction: None
• Consequences: Gain Privileges

2. Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability (CVE-2024-45711):

• CVSS: 7.5
• Attack Vector: Network
• Attack Complexity: High
• Privileges Required: Low
• User Interaction: None
• Consequences: Obtain Information

Affected Products

• SolarWinds Platform 2024.2.1 and all previous versions.
• Serv-U 15.4.2 and previous versions.
• Serv-U 15.4.2.3 and earlier versions.