Security · High impactFan score 45 · Tier B6 sources

N-able releases security hotfixes for zero-day vulnerabilities

BleepingComputer · By Sergiu Gatlan · 1h ago

The Brief · written from 6 sources

N-able took its hosted N-central environments offline after a researcher publicly disclosed more than 30 vulnerabilities collectively tracked as Able2Shell.
N-able urged on-premises customers to shut down their N-central servers until further notice as a precautionary measure.
Sources describe possible remote code execution, credential theft, and administrator account creation, and the disclosure included PoC exploits.

Why it matters

N-central is a remote monitoring and management platform, so a compromise could give attackers reach into the systems and customers it manages. Teams running N-central need to assess their exposure now.

Who’s affected

Organizations running N-able N-central on-premises
Customers using N-central Hosted Environments
MSPs and IT teams relying on N-central for remote monitoring and management

What to do

Follow N-able guidance and shut down on-premises N-central servers until further notice, as urged by N-able
Check for the status of hosted N-central environments before relying on them

#security
#vulnerability
#remote-monitoring
#zero-day
#n-able
#rmm

N-able released hotfixes to address zero-day bugs affecting its N-central remote monitoring and management (RMM) platform, which were publicly disclosed over the weekend and forced it to take vulnerable hosted environments offline. [...]

Read the full story at bleepingcomputer.com ↗