Rapid7 has issued an urgent security alert following the disclosure of 33 vulnerabilities affecting N-able N-central, a remote monitoring and management (RMM) platform used by managed service providers (MSPs) and enterprise IT teams.
The vulnerabilities, disclosed under the name Able2Shell, include unauthenticated remote code execution, privilege escalation and credential theft. Rapid7 said public proof-of-concept exploit code is available, raising concerns attackers could compromise MSP infrastructure and potentially gain access to downstream customer environments.
N-able has taken its hosted N-central environments offline and advised customers running on-premises servers to do the same while a hotfix is developed. Rapid7 said scanning activity has been detected, but there is currently no confirmed successful exploitation.
Rapid7 is urging affected organisations to treat the disclosure as an emergency, take vulnerable servers offline and investigate potential signs of compromise.
Read Rapid7’s analysis and mitigation guidance: https://www.rapid7.com/blog/post/etr-critical-vulnerabilities-in-n-able-n-central-prompt-hosted-shutdown/
