CriticalCVE
N-able issues advisory on critical vulnerabilities
Sophos Threat Research·Source published ·1 min read
What happened?
Categories: Threat Research Tags: advisory, N-able
Key details
- A researcher published proof-of-concept scripts targeting critical N-central vulnerabilities.
- N-able took hosted N-central environments offline as a precaution.
- Third-party reports suggest exploitation is occurring in the wild.
- N-able has not confirmed observed exploitation but noted scanning activity.
- Sophos X-Ops has not observed exploitation at this time.
- Sophos recommends reviewing N-able's advisory and monitoring for updates.
Affected
- On-premises N-central servers.
Fixes and mitigations
- Follow N-able's advisory for further instructions.
What to look for
- Scanning activity associated with published PoC code.
Summarised by SecOraLens from Sophos Threat Research. Always read the original source before acting. How SecOraLens verifies advisories.