SolarWinds customers who installed a poisoned version of Orion could only be targeted for further attack if Orion was installed on a server with access to the internet, Ramakrishna said.