Hackers getting in via NPM maybe

So, as I read all this, and note that we upgraded to 200.2.1 only last week then it appears we are already sorted - in as far as we can?

Is that right?

next hotfix should be out tomorrow.....   install this as well

The email received from Solarwinds indicates that an upgrade to 2020.2.1 HF1 will ensure the security of our environment. 

Does this also mean that if we were on HF1 already that we are immune to this attack?

Hello danielleh,

we are currently on version 2020.2 and on central upgrade it is showing as up to date !!! what should we do ?

shall we download HF and apply it straightaway ? 

Need clarity if we need to do to upgrade to 2020.2.1 first and then apply hotfix and is this not going to happen via central upgrade ?

Thanks

Anmol

No, it will NOT protect you from this exploit. It will merely "...make it more difficult to exploit the vulnerability". That's why they are working on HF2 to actually fix the problem.

SO.  What does HF1 do?  Just replace the bussineslayer.dll?
There is pretty much no way my team is going to allow SolarWinds back on the network without some REALLY detailed explanation.  

Any way to check the hotfix level without a live system? 

specific file somewhere or registry key? 

We opened support ticket last night with solarwinds support and few minutes ago we received following response from support:

`According to the "SolarWinds Security Advisory", SolarWinds Orion Platform software builds for versions 2019.4 HF 5 through 2020.2.1 affected and need to upgrade: https://www.solarwinds.com/securityadvisory

This buddy drop addresses the disclosed security vulnerability with SolarWinds.Orion.Core.BusinessLayer.dll in Orion Platform 2019.4 HF5:
https://downloads.solarwinds.com/solarwinds/Release/HotFix/OrionPlatform-2019.4HF5-SecurityFix.ZIP

we are running 2019.4. Has any one else who is running 2019.4 version received this email?