【Security Vulnerability Warning】【Update the Impacted platform and Suggested measures】Part versions of SolarWinds Orion Platform exist backdoor programs. Please confirm and update the version as soon as possible!

Subject:【Security Vulnerability Warning】【Update the Impacted platform and Suggested measures】Part versions of SolarWinds Orion Platform exist backdoor programs that allow attackers to remotely execute arbitrary code. Please confirm and update the version as soon as possible!

• Description:
  For details, please refer to the following links.
  
  1. https://cyber.dhs.gov/ed/21-01/#supplemental-guidance
  2. https://www.solarwinds.com/securityadvisory
  3. https://github.com/FireEye/sunburst_countermeasures
  4. https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html
  5. https://www.ithome.com.tw/news/141651
  6. https://www.ithome.com.tw/news/141666
  7. https://www.ithome.com.tw/news/141971
• Impacted platform：
  1. SolarWinds Orion Platform 20194 HF 5 (version 2019.4.5200.9083)
  2. SolarWinds Orion Platform 2020.2 RC1 (version 2020.2.100.12219)
  3. SolarWinds Orion Platform 2020.2 RC2 (version 2020.2.5200.12394)
  4. SolarWinds Orion Platform 2020.2 (version 2020.2.5300.12432)
  5. SolarWinds Orion Platform 2020.2 HF 1 (version 2020.2.5300.12432)

Network System Division
Computer and Communication Center