SolarWinds N-Central 12.3.0.670
Approved changes feed: RSS · Atom
cpe:2.3:a:solarwinds:n-central:12.3.0.670:*:*:*:*:*:*:*
part: a version: 12.3.0.670 update: *
| Vendor | Solarwinds (c393915a-764f-5773-8a18-db4a4d0f1496) |
|---|---|
| Product | N Central (884e41fc-1628-51ac-b426-4d2b87e983ea) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
| Notes | Imported from NVD CPE 2.0 feed |
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
| No PURL mappings for this CPE yet. | ||
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2020-25622 |
vulnerable | 2026-06-03 14:42:09.312564 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows CSRF.
Published: 2020-12-16T14:07:32.000Z
Updated: 2024-08-04T15:40:35.479Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25621 |
vulnerable | 2026-06-03 14:42:09.312272 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The local database does not require authentication: security is only based on ability to access a network interface. The database has keys and passwords.
Published: 2020-12-16T14:07:07.000Z
Updated: 2024-08-04T15:40:35.469Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25620 |
vulnerable | 2026-06-03 14:42:09.311972 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. Hard-coded Credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These allow logins to the N-Central Administrative Console (NAC) and/or the regular web interface.
Published: 2020-12-16T14:04:59.000Z
Updated: 2024-08-04T15:40:35.433Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25619 |
vulnerable | 2026-06-03 14:42:09.311657 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The SSH component does not restrict the Communication Channel to Intended Endpoints. An attacker can leverage an SSH feature (port forwarding with a temporary key pair) to access network services on the 127.0.0.1 interface, even though this feature was only intended for user-to-agent communication.
Published: 2020-12-16T14:01:36.000Z
Updated: 2024-08-04T15:33:05.827Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25618 |
vulnerable | 2026-06-03 14:42:09.311334 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The sudo configuration has incorrect access control because the nable web user account is effectively able to run arbitrary OS commands as root (i.e., the use of root privileges is not limited to specific programs listed in the sudoers file).
Published: 2020-12-16T13:56:58.000Z
Updated: 2024-08-04T15:33:05.761Z |
Imported from gcve-enriched-dumps CVE data |
CVE:CVE-2020-25617 |
vulnerable | 2026-06-03 14:42:09.310910 |
Details available
An issue was discovered in SolarWinds N-Central 12.3.0.670. The AdvancedScripts HTTP endpoint allows Relative Path Traversal by an authenticated user of the N-Central Administration Console (NAC), leading to execution of OS commands as root.
Published: 2020-12-16T13:52:03.000Z
Updated: 2024-08-04T15:33:05.751Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.