CVE-2025-40547

A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. This issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default.

CVSS v3 9.1 CRITICAL

9.1^/10

CVSS v3 : CRITICAL

Vector :

Exploitability : 2.3 / Impact : 6.0

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-3_release_notes.htm	Release Notes
https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40547	Vendor Advisory

Configurations

Configuration 1 (hide)

cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Una vulnerabilidad de error lógico existe en Serv-U que, cuando se abusa de ella, podría dar a un actor malicioso con acceso a privilegios de administrador la capacidad de ejecutar código. Este problema requiere privilegios administrativos para abusar. En implementaciones de Windows, el riesgo se puntúa como medio porque los servicios frecuentemente se ejecutan bajo cuentas de servicio con menos privilegios por defecto.

Information

Published : 2025-11-18 09:15

Updated : 2026-10-18 20:10

NVD link : CVE-2025-40547

Mitre link : CVE-2025-40547

CVE.ORG link : CVE-2025-40547

JSON object : View

Products Affected

solarwinds

serv-u

CWE

CWE-116

Improper Encoding or Escaping of Output

{"id": "CVE-2025-40547", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-40547", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-11-19T04:55:23.420047Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "psirt@solarwinds.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 9.1, "attackVector": "NETWORK", "baseSeverity": "CRITICAL", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 2.3}]}, "affected": [{"source": "psirt@solarwinds.com", "affectedData": [{"vendor": "SolarWinds", "product": "Serv-U", "versions": [{"status": "affected", "version": "SolarWinds Serv-U 15.5.2 and prior versions"}], "platforms": ["Windows", "Linux"], "defaultStatus": "affected"}]}], "published": "2025-11-18T09:15:51.970", "references": [{"url": "https://documentation.solarwinds.com/en/success_center/servu/content/release_notes/servu_15-5-3_release_notes.htm", "tags": ["Release Notes"], "source": "psirt@solarwinds.com"}, {"url": "https://www.solarwinds.com/trust-center/security-advisories/CVE-2025-40547", "tags": ["Vendor Advisory"], "source": "psirt@solarwinds.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "psirt@solarwinds.com", "description": [{"lang": "en", "value": "CWE-116"}]}], "descriptions": [{"lang": "en", "value": "A logic error vulnerability exists in Serv-U which when abused could give a malicious actor with access to admin privileges the ability to execute code. \n\nThis issue requires administrative privileges to abuse. On Windows deployments, the risk is scored as a medium because services frequently run under less-privileged service accounts by default."}, {"lang": "es", "value": "Una vulnerabilidad de error l\u00f3gico existe en Serv-U que, cuando se abusa de ella, podr\u00eda dar a un actor malicioso con acceso a privilegios de administrador la capacidad de ejecutar c\u00f3digo.\n\nEste problema requiere privilegios administrativos para abusar. En implementaciones de Windows, el riesgo se punt\u00faa como medio porque los servicios frecuentemente se ejecutan bajo cuentas de servicio con menos privilegios por defecto."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:solarwinds:serv-u:*:*:*:*:*:*:*:*", "vulnerable": true, "matchCriteriaId": "5536873C-698D-4936-AA0C-63D0BE2CD3E2", "versionEndExcluding": "15.5.3"}], "operator": "OR"}]}], "sourceIdentifier": "psirt@solarwinds.com"}