Throw away the patch! How to Attack Solarwinds Web Help Desk

In a recent attack, a timing scheme, Solarwinds Web Help Desk (WHD) administrators must be connected to active support. Now you can avoid any damage and handling of the dates beforehand.

Anzeige

Installing the security update

For the attacks, the US Cybersecurity and Infrastructure Security Agency (CISA) was notified in an action process. Die “kritish“The security incident (CVE-2024-28987) has been occurring since August. This is also the abgesicherte version. WHD 12.8.3 patch 2.

Aufgrund von hartcoded Zugangsdaten verschaffen sich Angreifer Zugriff auf die Kundensupport-Software et modifications Daten. Has the Angreifer been answered and in welchem ​​​​Umfang die Attacken derzeit ablaufen, it is unexpected. Neither is CISA, as Angriffe has blaufen. This is also because administrators attack the system along the way. This information also contains the official Warnmeldung no longer available.

(of the)