Date：2020/12/18

【Security Vulnerability Warning】Part versions of SolarWinds Orion Platform exist backdoor programs that allow attackers to remotely execute arbitrary code. Please confirm and update the version as soon as possible!

Subject:【Security Vulnerability Warning】Part versions of SolarWinds Orion Platform exist backdoor programs that allow attackers to remotely execute arbitrary code. Please confirm and update the version as soon as possible!

Description:
For details, please refer to the following links.

https://www.solarwinds.com/securityadvisory

https://github.com/FireEye/sunburst_countermeasures

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

https://www.ithome.com.tw/news/141651

https://www.ithome.com.tw/news/141666

https://www.nccst.nat.gov.tw/VulnerabilityDetail?lang=zh&seq=1138

Impacted platform：

SolarWinds Orion Platform 2019.4 HF 5

SolarWinds Orion Platform 2020.2

SolarWinds Orion Platform 2020.2 HF 1

Network System Division
Computer and Communication Center