{"id":"CVE-2024-45711","aliases":["EUVD-2024-41561","GHSA-93cp-72p2-5f74"],"status":"published","title":"SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability","description":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability","severity":{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.06287,"percentile":0.93677,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-22"],"published":"2024-10-16T07:27:22Z","modified":"2026-06-17T07:54:41Z","products":[{"vendor":"solarwinds","product":"serv-u"}],"references":[{"url":"https://www.solarwinds.com/trust-center/security-advisories/CVE-2024-45711","tags":["Vendor Advisory"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2024-45711"},{"url":"https://github.com/advisories/GHSA-93cp-72p2-5f74"}],"sources":{"cve":[{"id":"CVE-2024-45711","title":"SolarWinds Serv-U FTP Service Directory Traversal Remote Code Execution Vulnerability","description":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability","status":"published","published":"2024-10-16T07:27:22.001Z","modified":"2024-10-16T13:22:44.193Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:34:08.16279Z"}],"euvd":[{"id":"EUVD-2024-41561","description":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability","status":"published","published":"2024-10-16T07:27:22Z","modified":"2024-10-16T13:22:44Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-03T00:27:35.286068Z"}],"ghsa":[{"id":"GHSA-93cp-72p2-5f74","title":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code...","description":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability","status":"published","published":"2024-10-16T09:30:31Z","modified":"2024-10-16T09:30:39Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:58:31.476115Z"}],"nvd":[{"id":"CVE-2024-45711","description":"SolarWinds Serv-U is vulnerable  to a directory traversal  vulnerability where remote code execution is possible depending on privileges given to the authenticated user.  This issue requires a user to be authenticated and this is present when software environment variables are abused. Authentication is required for this vulnerability","status":"published","published":"2024-10-16T08:15:06.69Z","modified":"2026-06-17T07:54:41.467Z","cvss":[{"version":"3.1","score":7.5,"vector":"CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"secondary"},{"version":"3.1","score":8.8,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","level":"high","assessor":"primary"}],"cwes":["CWE-22"],"updated_at":"2026-11-02T14:10:31.879321Z"}]}}