[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$fr0AErxrQiFFbEVblJdfufb4I6B4HHbp276PhI3WKxYs":3,"g5a-risk:CVE-2021-35211":133},{"success":4,"data":5,"meta":131},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":46,"epssPercentile":28,"epssTimeSeries":47,"severity":48,"affectedProducts":49,"affectedProductsCount":58,"references":59,"referencesCount":79,"weaknesses":80,"weaknessesCount":88,"isActivelyExploited":4,"cisaInfo":89,"otxData":28,"relatedBlogPosts":90,"seoMetadata":91,"configurations":116,"relatedVendorCves":129,"notableEvents":130},"CVE-2021-35211","What is CVE-2021-35211?","Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploited, a threat actor may be able to gain privileged access to the machine hosting Serv-U Only. SolarWinds Serv-U Managed File Transfer and Serv-U Secure FTP for Windows before 15.2.3 HF2 are affected by this vulnerability.","Microsoft discovered a remote code execution (RCE) vulnerability in the SolarWinds Serv-U product utilizing a Remote Memory Escape Vulnerability. If exploite...","2021-07-14T21:15:08.09","2025-10-27T17:01:30",10,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H",{"CVSSMetricV31":15,"CVSSMetricV30":37,"CVSSMetricV2":38,"CVSSMetricV40":28},[16,31],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":29,"ImpactScore":30},"psirt@solarwinds.com","Secondary",{"Version":20,"VectorString":21,"AttackVector":22,"AttackComplexity":23,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":26,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"3.1","CVSS:3.1\u002FAV:N\u002FAC:H\u002FPR:N\u002FUI:N\u002FS:C\u002FC:H\u002FI:H\u002FA:H","NETWORK","HIGH","NONE","CHANGED",9,"CRITICAL",null,2.2,6,{"Source":32,"Type":33,"CVSSData":34,"ExploitabilityScore":36,"ImpactScore":30},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":22,"AttackComplexity":35,"PrivilegesRequired":24,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":23,"IntegrityImpact":23,"AvailabilityImpact":23,"BaseScore":12,"BaseSeverity":27,"ExploitCodeMaturity":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"TemporalSeverity":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"ModifiedAttackVector":28,"ModifiedAttackComplexity":28,"ModifiedPrivilegesRequired":28,"ModifiedUserInteraction":28,"ModifiedScope":28,"ModifiedConfidentialityImpact":28,"ModifiedIntegrityImpact":28,"ModifiedAvailabilityImpact":28,"EnvironmentalScore":28,"EnvironmentalSeverity":28},"LOW",3.9,[],[39],{"Source":32,"Type":33,"CVSSData":40,"BaseSeverity":23,"ExploitabilityScore":12,"ImpactScore":12,"ACInsufInfo":45,"ObtainAllPrivilege":45,"ObtainUserPrivilege":45,"ObtainOtherPrivilege":45,"UserInteractionRequired":45},{"Version":41,"VectorString":42,"AccessVector":22,"AccessComplexity":35,"Authentication":24,"ConfidentialityImpact":43,"IntegrityImpact":43,"AvailabilityImpact":43,"BaseScore":12,"BaseSeverity":44,"Exploitability":28,"RemediationLevel":28,"ReportConfidence":28,"TemporalScore":28,"CollateralDamagePotential":28,"TargetDistribution":28,"ConfidentialityRequirement":28,"IntegrityRequirement":28,"AvailabilityRequirement":28,"EnvironmentalScore":28},"2.0","AV:N\u002FAC:L\u002FAu:N\u002FC:C\u002FI:C\u002FA:C","COMPLETE","",false,0.9116,[46,46,46,46,46,46,46],"Critical",[50,55],{"vendor":51,"product":52,"version":53,"criteria":54,"vulnerable":4},"solarwinds","serv-u","*","cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*",{"vendor":51,"product":52,"version":56,"criteria":57,"vulnerable":4},"15.2.3","cpe:2.3:a:solarwinds:serv-u:15.2.3:-:*:*:*:*:*:*",2,[60,66,70,72,74],{"url":61,"source":62,"tags":63},"https:\u002F\u002Fwww.microsoft.com\u002Fsecurity\u002Fblog\u002F2021\u002F07\u002F13\u002Fmicrosoft-discovers-threat-actor-targeting-solarwinds-serv-u-software-with-0-day-exploit","Microsoft",[64,65],"Patch","Vendor Advisory",{"url":67,"source":68,"tags":69},"https:\u002F\u002Fwww.solarwinds.com\u002Ftrust-center\u002Fsecurity-advisories\u002Fcve-2021-35211","Solarwinds",[64,65],{"url":61,"source":62,"tags":71},[64,65],{"url":67,"source":68,"tags":73},[64,65],{"url":75,"source":76,"tags":77},"https:\u002F\u002Fwww.cisa.gov\u002Fknown-exploited-vulnerabilities-catalog?field_cve=CVE-2021-35211","CISA",[78],"US Government Resource",5,[81],{"id":82,"name":83,"description":84,"extendedDescription":44,"status":85,"abstraction":86,"structure":87},"CWE-787","Out-of-bounds Write","The product writes data past the end, or before the beginning, of the intended buffer.","Draft","Base","Simple",1,{"shortDescription":44,"requiredAction":44,"vulnerabilityName":44,"dateAdded":28},[],{"title":92,"metaDescription":93,"keywords":94,"canonicalUrl":95,"structuredData":96},"What is CVE-2021-35211? Vulnerability Analysis | Security Advisory | EdgeProtect","Comprehensive analysis of CVE-2021-35211, a critical severity cyber security vulnerability from 2021. High exploit probability (91.2%). Microsoft discovered ...","CVE-2021-35211, CVE-2021-35211 vulnerability, CVE-2021-35211 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2021, CVSS score, exploit, patch, remediation, solarwinds security, serv-u vulnerability, high risk vulnerability, actively exploited, exploit available","\u002Fwhat-is\u002Fcve-2021-35211",{"@context":97,"@type":98,"headline":92,"description":93,"datePublished":10,"dateModified":11,"author":99,"publisher":103,"about":107,"mainEntityOfPage":111,"articleSection":114,"keywords":115},"https:\u002F\u002Fschema.org","TechArticle",{"@type":100,"name":101,"url":102},"Organization","EdgeProtect","https:\u002F\u002Fedgeprotect.io",{"@type":100,"name":101,"url":102,"logo":104},{"@type":105,"url":106},"ImageObject","https:\u002F\u002Fedgeprotect.io\u002Fimg\u002Flogos\u002Fedgeprotect-logo-512.png",{"@type":108,"name":6,"description":109,"additionalType":110},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":112,"@id":113},"WebPage","https:\u002F\u002Fedgeprotect.io\u002Fwhat-is\u002Fcve-2021-35211","Cybersecurity","CVE-2021-35211, CVE-2021-35211 vulnerability, CVE-2021-35211 security, critical severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[117],{"Operator":28,"Negate":28,"Nodes":118},[119],{"Operator":120,"Negate":45,"CPEMatch":121},"OR",[122,124,126],{"Vulnerable":4,"Criteria":54,"MatchCriteriaID":123,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":56,"VersionEndIncluding":28},"66A68531-7831-4875-B0AB-215C3E5A62B6",{"Vulnerable":4,"Criteria":57,"MatchCriteriaID":125,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"9E8B32A1-90C1-4901-9B66-FA72E5787450",{"Vulnerable":4,"Criteria":127,"MatchCriteriaID":128,"VersionStartExcluding":28,"VersionStartIncluding":28,"VersionEndExcluding":28,"VersionEndIncluding":28},"cpe:2.3:a:solarwinds:serv-u:15.2.3:hotfix1:*:*:*:*:*:*","92569E9A-911C-4704-A962-047FF5E0E2CF",[],[],{"lastModified":11,"cacheTime":132,"version":41},1793386856587,{"score":134,"band":48,"action":135,"scoredAt":136},89,"Emergency patch","2026-10-30T06:51:59.249453+00:00"]