Pierluigi Paganini March 17, 2022

SolarWinds warns customers of potential cyberattacks targeting unpatched installs of its Web Help Desk (WHD) product.

SolarWinds has published a security advisory to warn customers of the risk of cyberattacks targeting unpatched Web Help Desk (WHD) installs.

The WHD is described by SolarWinds as an affordable Help Desk Ticketing and Asset Management Software.

SolarWinds declared that one of its customers was the victim of an external attempted attack on their instance of WHD. The attack was blocked by the customer’s endpoint detection and response (EDR) system. The vendor immediately launched an investigation into the hacking attempt.

“A SolarWinds customer reported an external attempted attack on their instance of Web Help Desk (WHD) 12.7.5. The customer’s endpoint detection and response (EDR) system blocked the attack and alerted the customer to the issue.” reads the Advisory published by SolarWinds. “In an abundance of caution, SolarWinds recommends all Web Help Desk customers whose WHD implementation is externally facing to remove it from your public (internet-facing) infrastructure until we know more. If you are not able to remove it from your public infrastructure at this time, we recommend you ensure you have EDR software deployed, and are monitoring the WHD instance.”

The Unauthenticated Access issue impacts only WHD version 12.7.5 which was released in May 2021. The company recommends disconnecting their WHD (version 12.7.5) installs from the Internet or protecting it with the deployment of an EDR solution.

Follow me on Twitter: @securityaffairs and Facebook

Pierluigi Paganini

(SecurityAffairs – hacking, WHD)

[adrotate banner=”5″]

[adrotate banner=”13″]