Covered by 3 outlets — first reported by BleepingComputer, Nov 9, 21:26 UTC
N-able takes cloud platform offline after 30+ "zero-days" published
Summary
N-able has taken its hosted N-central environments offline and is urging customers who run N-central on their own servers to shut them down until further notice. The step follows a researcher's public disclosure of more than 30 alleged zero-day vulnerabilities, flaws with no fix available, with proof-of-concept exploits; the set is collectively tracked as Able2Shell. SecurityWeek reports the flaws could allow remote code execution, credential theft and creation of administrator accounts. N-able describes the shutdown as a precaution while it works to secure the product.
AI summary by the SecurityTabs newsroom, checked against BleepingComputer, The Hacker News, SecurityWeek. Read the outlets below for the full story.
Continue reading
3 outlets, in the order they reported it.
BleepingComputerFirst report
N-able takes cloud platform offline after 30+ "zero-days" published
N-able has taken its hosted N-central environments offline and urged on-premises customers to shut down their servers after a security researcher publicly disclosed more than 30 alleged zero-day vulnerabilities, including exploits that…
The Hacker News
N-able Takes N-central Cloud Offline After Researcher Discloses 33 Zero-Days with PoC Exploits
N-able said it has taken N-central Hosted Environments offline and is urging on-premises customers to shut down their servers until further notice following the public disclosure of over 30 vulnerabilities collectively tracked as…
SecurityWeek
N-able Takes N-central Offline as Researcher Drops Over 30 Zero-Days
Attackers could exploit the flaws for remote code execution, credential theft, and administrator account creation.
Explained
The technology and terms in this story. Learn more
- ConceptZero-dayA flaw attackers exploit before the vendor has a fix: defenders have had zero days to patch.
- ConceptProof of conceptA demonstration that a flaw can be exploited, usually published by researchers.
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.