Date：2020/12/18

【Security Vulnerability Warning】【Update the Impacted platform and Suggested measures】Part versions of SolarWinds Orion Platform exist backdoor programs. Please confirm and update the version as soon as possible!

Subject:【Security Vulnerability Warning】【Update the Impacted platform and Suggested measures】Part versions of SolarWinds Orion Platform exist backdoor programs that allow attackers to remotely execute arbitrary code. Please confirm and update the version as soon as possible!

Description:
For details, please refer to the following links.

https://cyber.dhs.gov/ed/21-01/#supplemental-guidance

https://www.solarwinds.com/securityadvisory

https://github.com/FireEye/sunburst_countermeasures

https://www.fireeye.com/blog/threat-research/2020/12/evasive-attacker-leverages-solarwinds-supply-chain-compromises-with-sunburst-backdoor.html

https://www.ithome.com.tw/news/141651

https://www.ithome.com.tw/news/141666

https://www.ithome.com.tw/news/141971

Impacted platform：

SolarWinds Orion Platform 20194 HF 5 (version 2019.4.5200.9083)

SolarWinds Orion Platform 2020.2 RC1 (version 2020.2.100.12219)

SolarWinds Orion Platform 2020.2 RC2 (version 2020.2.5200.12394)

SolarWinds Orion Platform 2020.2 (version 2020.2.5300.12432)

SolarWinds Orion Platform 2020.2 HF 1 (version 2020.2.5300.12432)

Network System Division
Computer and Communication Center