N-able takes hosted N-central offline on November 9 after researcher publishes more than 30 alleged zero-days and PoC exploits
Researcher published exploit chains for 33 vulnerabilities; on November 9 N-able took hosted N-central offline and urged on-premises shutdowns while working on remediation.
- Urgency
- L4
- 72
- 80
- 60
- 40
- 85
At a glance
On November 9 N-able took its hosted N-central environments offline while it worked to secure and remediate the service, after an independent researcher published details of 33 vulnerabilities and proof-of-concept exploit chains to GitHub. BleepingComputer reports 'more than 30' alleged zero-day vulnerabilities and that N-able urged on-premises customers to shut down servers. The disclosures include exploit chains that could let attackers take over vulnerable systems, creating an elevated short-term risk for hosted and on-premises N-central customers.
- Researcher published exploit chains for 33 vulnerabilities; on November 9 N-able took hosted N-central offline and urged on-premises shutdowns while working on remediation.
CHRONOS Wire · November 10 · Alert 9
What happened
A researcher publicly posted details and proof-of-concept chains for more than 30 vulnerabilities affecting N-able N-central, and on November 9 N-able took its hosted N-central environments offline while it worked to secure the service. The disclosure includes exploit chains that could allow attackers to take over vulnerable systems, and on-premises customers were urged to shut down servers as a precaution.
Why it matters
Published proof-of-concept exploit chains plus vendor takedown create an immediate window of elevated exploitation risk for hosted and on-premises N-central deployments until vendor mitigations are released.
CHRONOS Bottom Line
On November 9 N-able disabled its hosted N-central environments after a researcher published proof-of-concept exploit chains for over 30 vulnerabilities; customers should follow vendor guidance and assume elevated risk until vendor remediation is published.
Full detail
What changed
Public disclosure of more than 30 proof-of-concept exploit chains for N-able N-central prompted N-able to take its hosted N-central environments offline on November 9 while engineering works to secure and remediate the environment; vendor urged on-premises customers to shut down servers as a precaution.
What is genuinely new
An independent researcher published details of 33 vulnerabilities and associated exploit chains to GitHub, and on November 9 N-able took its hosted N-central environments offline while it worked to secure and remediate the environment.
Detailed analysis
Two independent reports state a researcher published exploit details to GitHub and that N-able subsequently took hosted N-central environments offline on November 9 while working to secure and remediate the service. BleepingComputer reports 'more than 30' alleged zero-days and that N-able urged on-premises customers to shut down servers. Huntress reports the researcher published details of 33 critical vulnerabilities that can be chained into four exploits dubbed Able2Shell. The sources describe proof-of-concept exploit chains that include actions leading to takeover of vulnerable systems. The vendor action to disable hosted services and urge shutdowns indicates elevated operational risk until vendor mitigations are published.
U.S. Impact
U.S. Impact assessment pending.