Security · High impactFan score 43 · Tier B3 sources

N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days

SecurityWeek · By Ionut Arghire · 2h ago

The Brief · written from 3 sources

N-able has taken N-central Hosted Environments offline following public disclosure of over 30 vulnerabilities, tracked as Able2Shell.
A researcher disclosed 33 zero-day vulnerabilities with proof-of-concept exploits.
N-able is urging on-premises customers to shut down their N-central servers until further notice.

Why it matters

N-central is a remote monitoring and management platform, and public proof-of-concept exploits for its zero-days mean affected servers may be attacked while patches are still pending.

Who’s affected

Operators of on-premises N-central servers
Customers using N-central Hosted Environments

What to do

Shut down on-premises N-central servers until further notice, as N-able urges

#security
#vulnerability
#zero-day
#remote-monitoring
#n-able

Attackers could exploit the flaws for remote code execution, credential theft, and administrator account creation. The post N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days appeared first on SecurityWeek .

Read the full story at securityweek.com ↗