CVE-2020-25621: High severity solarwinds vulnerability

Published Dec 16, 2020

Updated

An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords.

Affected Software

1 affected component

SolarWinds N-Central=12.3.0.670

Event History

Dec 16, 2020

CVE Published

via MITRE·02:07 PM

Data Sourced

via MITRE·02:07 PM

Description

Frequently Asked Questions

What is the severity of CVE-2020-25621?

CVE-2020-25621 has been classified as a critical vulnerability due to its potential for unauthorized access to sensitive information.

How do I fix CVE-2020-25621?

To fix CVE-2020-25621, you should update SolarWinds N-Central to a version that requires authentication for the local database access.

What are the potential risks of CVE-2020-25621?

The risks of CVE-2020-25621 include unauthorized access to the database containing keys and passwords, which could lead to further exploitation.

Who is affected by CVE-2020-25621?

CVE-2020-25621 affects users of SolarWinds N-Central version 12.3.0.670.

Is there a workaround for CVE-2020-25621?

There are no known workarounds for CVE-2020-25621; the best approach is to apply security updates as they are released.