CVE-2020-25617

2020-12-1613:52:03

mitre

www.cve.org

solarwinds n-central

authenticated user

os commands

AI Score

8.8

Confidence

High

EPSS

0.007

Percentile

80.5%

JSON

An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.

References

ernw.de/en/publications.html

insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/

support.solarwinds.com/SuccessCenter/s/