Skip to main content
عربي
logo

NCSC-VD-2602-001-01

Severity Level: Critical

Reference No.: NCSC-VD-2602-001-01

SolarWinds

Description

The source reports four SolarWinds Serv-U vulnerabilities, each with CVSS 9.1, that can allow arbitrary code execution. The current vendor CNA descriptions clarify that exploitation requires administrative privileges and that Windows deployment risk is assessed as Medium.

CVE-2025-40538: A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges.

CVE-2025-40539: A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

CVE-2025-40540: A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

CVE-2025-40541: An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.

Vulnerabilities

  • CVE-2025-40538

    A broken access control vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to create a system admin user and execute arbitrary code as a privileged account via domain admin or group admin privileges.

  • CVE-2025-40539

    A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

  • CVE-2025-40540

    A type confusion vulnerability exists in Serv-U which when exploited, gives a malicious actor the ability to execute arbitrary native code as privileged account.

  • CVE-2025-40541

    An Insecure Direct Object Reference (IDOR) vulnerability exists in Serv-U, which when exploited, gives a malicious actor the ability to execute native code as a privileged account.

References