UpHeron
All vulnerabilities

Servers and applications

CVE-2021-35211

Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.

Actively exploited: CISA added it to its Known Exploited Vulnerabilities catalog on 3 Nov 2021.

Severity
Critical 10.0
Published
14 Jul 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
15.2.3
Sources
NVD

Affected software

SoftwareAffected versions
SolarWinds Serv-UServers and applications · cpe:a:solarwinds:serv-u
  • Every version before 15.2.3
  • Version 15.2.3
  • Version 15.2.3-hotfix1

Known exploited

CISA name
SolarWinds Serv-U Remote Code Execution Vulnerability
Required action
Apply updates per vendor instructions.
Due for US agencies
17 Nov 2021
Used in ransomware
Yes, known

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-35211
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-35211