N-able Disables Cloud Services Following Disclosure of "Able2Shell" Exploit Chains
UPDATE: N-able took N-central offline after 33 critical flaws were disclosed, including chains enabling remote code execution and privilege escalation.
Summary from Huntress Blog.
Explained
The technology and terms in this story. Learn more
- AttackRemote code execution · RCEA flaw that lets an attacker run their own code on someone else's machine over the network.
- AttackPrivilege escalationGoing from limited access to more powerful access, such as from a normal user to administrator.
- ConceptExploitCode or a technique that turns a software flaw into something an attacker can actually use.
