N-able Disables N-Central Cloud Service Following Disclosure of Multiple Zero-Day Vulnerabilities
N-able has taken its cloud-hosted N-Central remote access service offline to address a series of critical security vulnerabilities. The decision follows the public disclosure of dozens of 'zero-day' bugs, dubbed 'Able2Shell' by researcher Ben Bales, which could allow attackers to steal credentials, create administrative accounts, and gain root access to systems. In addition to taking its own cloud services offline, N-able has advised customers using self-hosted deployments to take their systems down immediately to prevent potential exploitation. While the company stated it has found no evidence of successful attacks against customer environments, the sudden nature of the disclosure—which provided no advance notice for patching—has created significant operational disruption for corporate users relying on the platform for network management.
Topics: cyberattack cybersecurity remote access security service outage zero-day vulnerabilities