Community
- Command Central
- MVP Program
- Monthly Mission
- Blogs
- Groups
- Events
- Media Vault
Products
- Observability
- Network Management
- Application Management
- IT Security
- IT Service Management
- System Management
- Database Management
Content Exchange
- SolarWinds Platform
- Server & Application Monitor
- Database Performance Analyzer
- Server Configuration Monitor
- Network Performance Monitor
- Network Configuration Manager
- SQL Sentry
- Web Help Desk
Free Tools & Trials

Solar Winds Security isn't reporting properly.

So I'm coming to the community as the utterly useless Solar Winds support have not managed to answer even one single ticket I've raised to date, I've never seen support this bad for any product.

Right......So I'm looking at my security dashboard in SW, it's showing me vulnerabilities along with the CVE against specific nodes I have that within the scope of the firmware that's affected.

This is fine, but upon further inspection I can see that some nodes have newer firmware, and in fact outside the scope of firmware affected by this CVE, it looks like the the security or match isn't correctly identifying these nodes as having firmware that's beyond the version affected.

Has anyone else seen this issue and found a possible fix?

Find more posts tagged with

Accepted answers

All comments

mesverrum

SNMP is terrible about passing in firmware versions in a format that lines up cleanly with published CVE data. How are you doing your further inspection? By connecting to the device and checking from in there or by looking at the description data that SW actually has access to?
I would expect it's probably a regex match that is a bit too broad or the snmp doesn't actually offer the full level of detail to know if you have applied a patch.

Maybe some specific examples of a device would be useful?

aannavar

Hi Rolfey83

Agree with mesverrum here. is there any specific example of any node that you can share? That would be useful to see if its a bug.

Also, for CVEs that are identified based on version alone and may not be applicable for your configurations, we are working on a solution to not show them in the overall count/score widgets.