Serv-U
CVE-2021-35223: Execute Command Function Allows Remote Code Execution (RCE)Vulnerability
The Serv-U File Server allows for events such as user login failures to be audited by executing a command.
Published
Automatic summary from the vendor's CVE record. We haven't written a full analysis of this vulnerability yet.
Affected and fixed versions
| Product / branch | Fixed in |
|---|---|
| Serv-U 15.2.3 and previous versions to 15.2.4 | Upgrade past 15.2.4; see the advisory |
Always confirm against the vendor advisory, which lists every fixed hotfix.
What it is
The Serv-U File Server allows for events such as user login failures to be audited by executing a command. This command can be supplied with parameters that can take the form of user string variables, allowing remote code execution.
Workarounds
If you are unable to upgrade immediately. See SolarWinds Knowledgebase Article Below: https://support.solarwinds.com/SuccessCenter/s/article/Execute-Command-Function-Allows-Remote-Code-Execution-RCE-Vulnerability-CVE-2021-35223?language=en_US
Sources
KEV status, EPSS score and vendor data refreshed automatically, last on 13 Oct 2026.