Login Request a demo
High severity · published Dec 16, 2020
CVE-2020-25618
An issue was discovered in SolarWinds N-Central 12.3.0.670
8.8
CVSS
2.7%
EPSS
No
On KEV
Description
An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)2.7% · higher than 86% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
NC
N-central · Solarwinds
12.3.0.670 · source: NVD
Affected product
NC
N-central
Solarwinds
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2020-25618
CVE.org
https://www.cve.org/CVERecord?id=CVE-2020-25618
Third Party Advisory
https://ernw.de/en/publications.html
Third Party Advisory
https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
Vendor Advisory
https://support.solarwinds.com/SuccessCenter/s/
More from N-central
8.8
CVE-2020-25622
An issue was discovered in SolarWinds N-Central 12.3.0.670
8.8
CVE-2020-25617
An issue was discovered in SolarWinds N-Central 12.3.0.670
8.8
CVE-2020-15909
SolarWinds N-central through 2020.1 allows session hijacking and requires user interaction or physical access
8.4
CVE-2020-25621
An issue was discovered in SolarWinds N-Central 12.3.0.670
7.8
CVE-2020-25620
An issue was discovered in SolarWinds N-Central 12.3.0.670