CVE-2020-25619
MEDIUM
4,4
Source: [email protected]
Attack Vector: local
Attack Complexity: low
Privileges Required: low
User Interaction: none
Scope: unchanged
Confidentiality: low
Integrity: low
Availability: none
LOW
3,6
Source: [email protected]
Access Vector: local
Access Complexity: low
Authentication: none
Confidentiality: partial
Integrity: partial
Availability: none
Description
AI Translation Available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwarding with a temporary key pair) to access network services on the 127.0.0.1 interface, even though this feature was only intended for user-to-agent communication.
EPSS (Exploit Prediction Scoring System)
Trend Analysis
EPSS (Exploit Prediction Scoring System)
Prevede la probabilità di sfruttamento basata su intelligence sulle minacce e sulle caratteristiche della vulnerabilità.
EPSS Score
0,0080
Percentile
0,7th
Updated
EPSS Score Trend (Last 91 Days)
Application
N-Central by Solarwinds
CPE Identifier
View Detailed Analysis
cpe:2.3:a:solarwinds:n-central:12.3.0.670:*:*:*:*:*:*:*
Common Platform Enumeration - Standardized vulnerability identification
https://ernw.de/en/publications.html
https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
https://support.solarwinds.com/SuccessCenter/s/
https://ernw.de/en/publications.html
https://insinuator.net/2020/12/security-advisories-for-solarwinds-n-central/
https://support.solarwinds.com/SuccessCenter/s/