CVE-2020-25620

Name of the Vulnerable Software and Affected Versions SolarWinds N-Central version 12.3.0.670

Description An issue was discovered in SolarWinds N-Central where hard-coded credentials exist by default for local user accounts named support@n-able.com and nableadmin@n-able.com. These credentials allow logins to the N-Central Administrative Console and/or the regular web interface.

Recommendations For SolarWinds N-Central version 12.3.0.670, consider changing the default credentials for the support@n-able.com and nableadmin@n-able.com user accounts to prevent unauthorized access. As a temporary workaround, restrict access to the N-Central Administrative Console and the regular web interface until the issue is resolved.