Vulnerability Details CVE-2020-25621
An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.002
EPSS Ranking 44.2%
CVSS Severity
CVSS v3 Score 8.4
CVSS v2 Score 2.1
References
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/
- https://ernw.de/en/publications.html
- https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
- https://support.solarwinds.com/SuccessCenter/s/
Products affected by CVE-2020-25621
-
cpe:2.3:a:solarwinds:n-central:12.3.0.670