Solarwinds Nta Guide Upgrade To These

Subsequent releases 2019.4 HF 1, 2019.4 HF 2, 2019.4 HF 3, and 2019.4 HF 4 did not include either test modifications contained in the 2019.4 version or the SUNBURST vulnerability contained in 2019.4 HF 5, 2020.2 with no hotfix and 2020.2 HF 1.

Get help, be heard by us and do your job better using our products.

Like other software companies, we seek to responsibly disclose vulnerabilities in our products to our customers while also mitigating the risk that bad actors seek to exploit those vulnerabilities by releasing updates to our products that remediate these vulnerabilities before we disclose them.

You can also Subscribe to this RSS Feed to be notified when we update this page (note: you will need to cut and paste the Subscribe to this RSS feed URL into an RSS Feed Reader, e.g.

Outlooks RSS Subscriptions, to monitor updates).

As part of our response to the SUNBURST vulnerability, the code-signing certificate used by SolarWinds to sign the affected software versions will be revoked on March 8, 2021.

This is industry-standard best practice for software that has been compromised.

Solarwinds Nta Guide Upgrade To These

To ensure the performance of your SolarWinds product(s), you must upgrade to these new builds before March 8, 2021.

It is malware that is separately placed on a server that requires unauthorized access to a customers network and is designed to appear to be part of a SolarWinds product.

The second is the utilization of a vulnerability in the Orion Platform to enable deployment of the malicious code.

This vulnerability in the Orion Platform has been resolved in the latest updates.

In this case, it appears that the code was intended to be used in a targeted way as its exploitation requires manual intervention.

Weve been advised that the nature of this attack indicates that it may have been conducted by an outside nation state, but SolarWinds has not verified the identity of the attacker.

SUNSPOT is not a new malware or attack, but instead a component of the SUNBURST cyberattack.

SUNSPOT, TEARDROP, and RAINDROP are NOT new vulnerabilities within our products as some reports in the media have indicated, but instead, they are elements of the SUNBURST attack chain.

The latest information can be found on CISAs Supply Chain Compromise page and continues to be updated as we learn more.

Also, while we are still investigating our non-Orion products, we have not seen any evidence that they are impacted by the SUNBURST vulnerability.

To check which hotfix updates you have applied, please go here.

These updates contain security enhancements including those designed to protect you from SUNBURST and SUPERNOVA.

NOTE: If you reinstall, you need to re-apply the patch or hotfix.

While this version is not impacted by the SUNBURST vulnerability, it is the first version in which we have seen activity from the attacker at this time.

Solarwinds Nta Install Guide