We recommend you install these updates immediately.

Please see the Security Updates table below for the applicable update for your system.

Serv-U version 15.2.3 hotfix (HF) 2 has been released. An attacker could then install programs view, change, or delete data or run programs on the affected system. A threat actor who successfully exploited this vulnerability could run arbitrary code with privileges. The vulnerability exists in the latest Serv-U version 15.2.3 HF1 released May 5, 2021, and all prior versions. While Microsoft’s research indicates this vulnerability exploit involves a limited, targeted set of customers and a single threat actor, our joint teams have mobilized to address it quickly. SolarWinds was recently notified by Microsoft of a security vulnerability related to Serv-U Managed File Transfer Server and Serv-U Secured FTP and have developed a hotfix to resolve this vulnerability. UPDATE July 10, 2021: NOTE : This security vulnerability only affects Serv-U Managed File Transfer and Serv-U Secure FTP and does not affect any other SolarWinds or N-able (formerly SolarWinds MSP) products. You can also find additional details on the threat actor and their findings in a blog post from Microsoft. UPDATE July 13, 20201: We've provided additional indicators of compromise (IOCs) below. Security Advisory Summary UPDATE July 15, 20201: You can Subscribe to this RSS Feed to be notified when we update this page (note: you will need to cut and paste the 'Subscribe to this RSS feed' URL into an RSS Feed Reader, e.g., Outlook's RSS Subscriptions, to monitor updates). Serv-U Remote Memory Escape Vulnerability

Microsoft ftp service exploit