About Solarwinds Cyberattack Questionnaire

The Solarwinds Cyberattack Questionnaire - 1.0 helps to determine the existence and extent to which the cyberattack on the Solarwinds Orion software has impacted your vendors' IT systems. The questionnaire also helps to document vendor responses, if any, to the security-related issues.

The questionnaire is based on the following:

To access the Solarwinds Cyberattack Questionnaire - 1.0

  1. On the Third-Party Risk Management menu, select Templates. The Templates screen appears.

  2. Click the Choose From Gallery button. The Vendor Templates screen appears.

  3. Search for Solarwinds. The Solarwinds Cyberattack Questionnaire - 1.0 will appear.

Impacted Software Versions

Solarwinds experienced a cyberattack on its Orion software versions 2019.4 HF 5, 2020.2 with no hotfix installed, and 2020.2 HF 1. According to Solarwinds, these software versions include the following:

  • Application Centric Monitor (ACM)

  • Database Performance Analyzer Integration Module (DPAIM)

    Note:

    DPAIM is an integration module. It is not the same as Database Performance Analyzer (DPA), which Solarwinds does not believe was affected.

  • Enterprise Operations Console (EOC)

  • High Availability (HA)

  • IP Address Manager (IPAM)

  • Log Analyzer (LA)

  • Network Automation Manager (NAM)

  • Network Configuration Manager (NCM)

  • Network Operations Manager (NOM)

  • Network Performance Monitor (NPM)

  • NetFlow Traffic Analyzer (NTA)

  • Server & Application Monitor (SAM)

  • Server Configuration Monitor (SCM)

  • Storage Resource Monitor (SRM)

  • User Device Tracker (UDT)

  • Virtualization Manager (VMAN)

  • VoIP & Network Quality Manager (VNQM)

  • Web Performance Monitor (WPM)

Non-Impacted Software Versions

According to SolarWinds, the following products are not known to be affected by this security vulnerability:

  • 8Man

  • Access Rights Manager (ARM)

  • AppOptics

  • Backup Document

  • Backup Profiler

  • Backup Server

  • Backup Workstation

  • CatTools

  • Dameware Mini Remote Control

  • Dameware Patch Manager

  • Dameware Remote Everywhere

  • Dameware Remote Manager

  • Database Performance Analyzer (DPA)

  • Database Performance Monitor (DPM)

  • DNSstuff

  • Engineer’s Toolset

  • Engineer's Web Toolset

  • FailOver Engine

  • Firewall Security Monitor

  • Identity Monitor

  • ipMonitor

  • Kiwi CatTools

  • Kiwi Log Viewer

  • Kiwi Syslog Server

  • LANSurveyor

  • Librato

  • Log & Event Manager (LEM)

  • Log and Event Manager Workstation Edition

  • Loggly

  • Mobile Admin

  • Network Topology Mapper (NTM)

  • Papertrail

  • Patch Manager

  • Pingdom

  • Pingdom Server Monitor

  • Security Event Manager (SEM)

  • Security Event Manager Workstation Edition

  • Server Profiler

  • Service Desk

  • ServU FTP Server

  • Serv-U Gateway

  • Serv-U MFT Server

  • Storage Manager

  • Storage Profiler

  • Threat Monitor

  • Virtulaization Profiler

  • Web Help Desk

  • SQL Sentry

  • DB Sentry

  • V Sentry

  • Win Sentry

  • BI Sentry

  • SentryOne Document

  • SentryOne Test

  • Task Factory

  • DBA xPress

  • Plan Explorer

  • APS Sentry

  • DW Sentry

  • SQL Sentry Essentials

  • SentryOne Monitor

  • BI xPress

  • SolarWinds MSP Products:

    • N-central - Probe

    • N-central - Topology

    • N-central - NetPath

    • N-central

    • NetPath - Server

    • RMM

    • Backup Disaster Recovery

    • M365 Backup

    • Backup

    • Mail Assure

    • SpamExperts

    • MSP Manager

    • PassPortal

    • Take Control

    • Patch

    • Automation Manager

    • Webprotection

Additional Resources

To learn more about the cyberattacks, please refer to the Solarwinds Security Advisory FAQs on SUPERNOVA and SUNBURST. For more information on responding to the cyberattacks, please refer to the following resources: