The SolarWinds Orion platform is used for monitoring IT infrastructure and it is deployed quite broadly in enterprise and government networks around the world. Until the disclosure of the compromise of SolarWinds’ internal infrastructure, which resulted in an adversary gaining access to a build server and delivering a malicious update to some customers, the company’s software had not been the focus of much public vulnerability research. Unsurprisingly, that has resulted in the discovery of several new vulnerabilities, including a pair of bugs that, when combined, can lead to remote code execution.
Since the first revelations about the SolarWinds compromise in December, there have been a number of after effects, one of which is that security researchers have focused more attention on the company’s products.
0 kommentar(er)
