Vulnerabilities have been discovered and reported to SolarWinds by Martin Rakhmanov, Security Research Manager, SpiderLabs at Trustwave, and have proof-of-concept (PoC) exploit code available. A third vulnerability allows a remote, unprivileged actor to take control of the Orion platform. The grace period expires on February 9, when the PoCs for all three vulnerabilities will be publicly available. Users can get the fixes by installing Orion Platform 2020.4 and by applying Hotfix 1.2.2.
Source: https://www.bleepingcomputer.com/news/security/solarwinds-patches-critical-vulnerabilities-in-the-orion-platform/