Zero-Day in SolarWinds Serv-U Managed File Transfer Exploited in the Wild (CVE-2021-35211)

Last week, SolarWinds published a security advisory for a vulnerability in its Serv-U Managed File Transfer Server software. The vulnerability, identified as CVE-2021-35211, is a remote memory escape vulnerability. It was discovered by researchers at Microsoft’s Threat Intelligence Center, who found that it had been exploited in the wild in a “limited, targeted” set of attacks.

Microsoft published a blog post, which shed light on its discovery, including attributing it to an unnamed group they call DEV-0322.

For more information about the vulnerability, including the availability of patches and Tenable product coverage, please visit our blog.