Skip to content
OpenAdvisories
Critical 1 exploited CVE SCA-2021-0003 1 CVE

SICK Security Advisory for Apache Log4j (CVE-2021-44228)

Published Dec 14, 2021 · Updated Dec 17, 2021 · Revision 8

Vendor: SICK Product: AppManager Product: AppStudio Product: FieldEcho Product: FieldEcho Dashboard Product: Function Block Factory

Vulnerabilities 1

  • Critical 10.0
    CVE-2021-44228 Exploited · Ransomware Public exploit Scanner template EPSS 100%

    Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

    Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who …

    Apache Software Foundation Apache Log4j2 apache-log4j2 org.apache.logging.log4j:log4j-core Debian Ubuntu Maven
    KEV Dec 10, 2021

Revision history

  1. #8

    Updated Advisory: URL for SICK Operating Guidelines has been updated

  2. #7

    Updated Advisory (only visual changes)

  3. #6

    Updated affected products

  4. #5

    Updated affected products

  5. #4

    Updated affected products

  6. #3

    Updated affected versions

  7. #2

    Updated affected products

  8. #1

    Initial Release

References