Vulnerability Details CVE-2020-25617
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.11
EPSS Ranking 93.1%
CVSS Severity
CVSS v3 Score 8.8
CVSS v2 Score 9.0
References
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/
Products affected by CVE-2020-25617
-
cpe:2.3:a:solarwinds:n-central:12.3.0.670