Vulnerability identifier: #VU20297

Vulnerability risk: Low

CVSSv3.1: 3.5 [CVSS:3.1/AV:N/AC:H/PR:L/UI:R/S:U/C:L/I:L/A:N/E:F/RL:O/RC:C]

CVE-ID: CVE-2019-12181

CWE-ID: CWE-264

Exploitation vector: Network

Exploits in database: 5

• June 17, 2021
  • Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (2) [Exploit-DB]
  • Serv-U FTP Server - prepareinstallation Privilege Escalation (Metasploit) [Exploit-DB]
  • Serv-U FTP Server < 15.1.7 - Local Privilege Escalation (1) [Exploit-DB]
• March 18, 2020
  • CVE-2019-12181 (LPE Exploit For CVE-2019-12181 (Serv-U FTP 15.1.6)) [Github]
  • Serv-U FTP Server prepareinstallation Privilege Escalation [Metasploit]

Impact: Information disclosure and data manipulation

Vulnerable software:
Serv-U FTP Server
Server applications / File servers (FTP/HTTP)

Vendor: SolarWinds