Critical · published December 10, 2021
CVSS calls it critical at 10.0. It is confirmed in active exploitation. It sits in the 100.0th percentile for exploit probability.
🚨 A single log message can lead to remote code execution with this jaw-dropping Log4j vulnerability! 🔥 Think of it like a restaurant that not only takes your order but also prepares a dish based on the note you leave on the table — if a mischievous diner writes in a secret ingredient, they get to control the whole meal! This allows attackers to execute arbitrary code on your server, potentially giving them full control over your systems. Imagine someone barging in and accessing sensitive data, changing configurations, or even shutting down critical services—it's absolutely devastating!
Think of it like a restaurant that not only takes your order but also prepares a dish based on the note you leave on the table — if a mischievous diner writes in a secret ingredient, they get to control the whole meal! CVE-2021-44228 in Apache Log4j2 allows attackers to exploit JNDI features in log messages and configuration to execute code from LDAP servers when message lookup substitution is enabled. This vulnerability specifically affects log4j-core and versions up to 2.15.0.
This allows attackers to execute arbitrary code on your server, potentially giving them full control over your systems. Imagine someone barging in and accessing sensitive data, changing configurations, or even shutting down critical services—it's absolutely devastating! Upgrade to Log4j version 2.16.0 or later immediately to eliminate this risk. If you cannot upgrade, ensure that JNDI lookup functionality is disabled in your configuration. Regularly audit your logging practices to avoid this vulnerability! You've got this! Follow these steps to secure your systems and protect against this critical vulnerability! 🛡️
| Product | Versions | Fixed in |
|---|---|---|
| siemens/6bk1602-0aa12-0tp0_firmware | < 2.7.0 | 2.7.0 |
| siemens/6bk1602-0aa22-0tp0_firmware | < 2.7.0 | 2.7.0 |
| siemens/6bk1602-0aa32-0tp0_firmware | < 2.7.0 | 2.7.0 |
| siemens/6bk1602-0aa42-0tp0_firmware | < 2.7.0 | 2.7.0 |
| siemens/6bk1602-0aa52-0tp0_firmware | < 2.7.0 | 2.7.0 |
| apache/log4j | ≥ 2.0.1, < 2.3.1 | 2.3.1 |
| apache/log4j | ≥ 2.4.0, < 2.12.2 | 2.12.2 |
| apache/log4j | ≥ 2.13.0, < 2.15.0 | 2.15.0 |
| apache/log4j | all versions | — |
| apache/log4j | all versions | — |
| apache/log4j | all versions | — |
| apache/log4j | all versions | — |
| siemens/sppa-t3000_ses3000_firmware | all versions | — |
| siemens/capital | < 2019.1 | 2019.1 |
| siemens/capital | all versions | — |
| siemens/capital | all versions | — |
| siemens/comos | < 10.4.2 | 10.4.2 |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_advanced_reports | all versions | — |
| siemens/desigo_cc_info_center | all versions | — |
| siemens/desigo_cc_info_center | all versions | — |
| siemens/e-car_operation_center | < 2021-12-13 | 2021-12-13 |
| siemens/energy_engage | all versions | — |
| siemens/energyip | all versions | — |
| siemens/energyip | all versions | — |
| siemens/energyip | all versions | — |
| siemens/energyip | all versions | — |
| siemens/energyip_prepay | < 3.8.0.12 | 3.8.0.12 |
| siemens/gma-manager | < 8.6.2j-398 | 8.6.2j-398 |
| siemens/head-end_system_universal_device_integration_system | all versions | — |
| siemens/industrial_edge_management | all versions | — |
| siemens/industrial_edge_management_hub | < 2021-12-13 | 2021-12-13 |
| siemens/logo\!_soft_comfort | all versions | — |
| siemens/mendix | all versions | — |
| siemens/mindsphere | < 2021-12-16 | 2021-12-16 |
| siemens/navigator | < 2021-12-13 | 2021-12-13 |
| siemens/nx | all versions | — |
| siemens/opcenter_intelligence | ≥ 3.2, < 3.5 | 3.5 |
| siemens/operation_scheduler | ≤ 1.1.3 | — |
| siemens/sentron_powermanager | all versions | — |
| siemens/sentron_powermanager | all versions | — |
| siemens/siguard_dsa | ≥ 4.2, < 4.4.1 | 4.4.1 |
| siemens/sipass_integrated | all versions | — |
| siemens/sipass_integrated | all versions | — |
| siemens/siveillance_command | ≤ 4.16.2.1 | — |
| siemens/siveillance_control_pro | all versions | — |
| siemens/siveillance_identity | all versions | — |
| siemens/siveillance_identity | all versions | — |
| siemens/siveillance_vantage | all versions | — |
| siemens/siveillance_viewpoint | all versions | — |
| siemens/solid_edge_cam_pro | all versions | — |
| siemens/solid_edge_harness_design | < 2020 | 2020 |
| siemens/solid_edge_harness_design | all versions | — |
| siemens/solid_edge_harness_design | all versions | — |
| siemens/solid_edge_harness_design | all versions | — |
| siemens/spectrum_power_4 | < 4.70 | 4.70 |
| siemens/spectrum_power_4 | all versions | — |
| siemens/spectrum_power_4 | all versions | — |
| siemens/spectrum_power_4 | all versions | — |
| siemens/spectrum_power_7 | < 2.30 | 2.30 |
| siemens/spectrum_power_7 | all versions | — |
| siemens/spectrum_power_7 | all versions | — |
| siemens/spectrum_power_7 | all versions | — |
| siemens/teamcenter | all versions | — |
| siemens/vesys | < 2019.1 | 2019.1 |
| siemens/vesys | all versions | — |
| siemens/vesys | all versions | — |
| siemens/vesys | all versions | — |
| siemens/vesys | all versions | — |
| siemens/vesys | all versions | — |
| siemens/xpedition_enterprise | all versions | — |
| siemens/xpedition_package_integrator | all versions | — |
| intel/computer_vision_annotation_tool | all versions | — |
| intel/datacenter_manager | < 5.1 | 5.1 |
| intel/genomics_kernel_library | all versions | — |
| intel/oneapi_sample_browser | all versions | — |
| intel/secure_device_onboard | all versions | — |
| intel/system_studio | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| debian/debian_linux | all versions | — |
| fedoraproject/fedora | all versions | — |
| fedoraproject/fedora | all versions | — |
| sonicwall/email_security | < 10.0.13 | 10.0.13 |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/active_iq_unified_manager | all versions | — |
| netapp/brocade_san_navigator | all versions | — |
| netapp/cloud_insights | all versions | — |
| netapp/cloud_manager | all versions | — |
| netapp/cloud_secure_agent | all versions | — |
| netapp/oncommand_insight | all versions | — |
| netapp/ontap_tools | all versions | — |
| netapp/snapcenter | all versions | — |
| netapp/solidfire_\&_hci_storage_node | all versions | — |
| netapp/solidfire_enterprise_sds | all versions | — |
| cisco/advanced_malware_protection_virtual_private_cloud_appliance | < 3.5.4 | 3.5.4 |
| cisco/automated_subsea_tuning | < 2.1.0 | 2.1.0 |
| cisco/broadworks | < 2021.11_1.162 | 2021.11_1.162 |
| cisco/business_process_automation | < 3.0.000.115 | 3.0.000.115 |
| cisco/business_process_automation | ≥ 3.1.000.000, < 3.1.000.044 | 3.1.000.044 |
| cisco/business_process_automation | ≥ 3.2.000.000, < 3.2.000.009 | 3.2.000.009 |
| cisco/cloud_connect | < 12.6\(1\) | 12.6\(1\) |
| cisco/cloudcenter | < 4.10.0.16 | 4.10.0.16 |
| cisco/cloudcenter_cost_optimizer | < 5.5.2 | 5.5.2 |
| cisco/cloudcenter_suite_admin | < 5.3.1 | 5.3.1 |
| cisco/cloudcenter_workload_manager | < 5.5.2 | 5.5.2 |
| cisco/common_services_platform_collector | < 2.9.1.3 | 2.9.1.3 |
| cisco/common_services_platform_collector | ≥ 2.10.0, < 2.10.0.1 | 2.10.0.1 |
| cisco/connected_mobile_experiences | all versions | — |
| cisco/contact_center_domain_manager | < 12.5\(1\) | 12.5\(1\) |
| cisco/contact_center_management_portal | < 12.5\(1\) | 12.5\(1\) |
| cisco/crosswork_data_gateway | < 2.0.2 | 2.0.2 |
| cisco/crosswork_data_gateway | all versions | — |
| cisco/crosswork_network_controller | < 2.0.1 | 2.0.1 |
| cisco/crosswork_network_controller | all versions | — |
| cisco/crosswork_optimization_engine | < 2.0.1 | 2.0.1 |
| cisco/crosswork_optimization_engine | all versions | — |
| cisco/crosswork_platform_infrastructure | < 4.0.1 | 4.0.1 |
| cisco/crosswork_platform_infrastructure | all versions | — |
| cisco/crosswork_zero_touch_provisioning | < 2.0.1 | 2.0.1 |
| cisco/crosswork_zero_touch_provisioning | all versions | — |
| cisco/customer_experience_cloud_agent | < 1.12.1 | 1.12.1 |
| cisco/cyber_vision_sensor_management_extension | < 4.0.3 | 4.0.3 |
| cisco/data_center_network_manager | < 11.3\(1\) | 11.3\(1\) |
| cisco/data_center_network_manager | all versions | — |
| cisco/dna_center | < 2.1.2.8 | 2.1.2.8 |
| cisco/dna_center | ≥ 2.2.2.0, < 2.2.2.8 | 2.2.2.8 |
| cisco/dna_center | ≥ 2.2.3.0, < 2.2.3.4 | 2.2.3.4 |
| cisco/dna_spaces\ | < 2.5 | 2.5 |
| cisco/emergency_responder | < 11.5\(4\) | 11.5\(4\) |
| cisco/enterprise_chat_and_email | < 12.0\(1\) | 12.0\(1\) |
| cisco/evolved_programmable_network_manager | ≤ 4.1.1 | — |
| cisco/finesse | < 12.6\(1\) | 12.6\(1\) |
| cisco/finesse | all versions | — |
| cisco/fog_director | all versions | — |
| cisco/identity_services_engine | < 2.4.0 | 2.4.0 |
| cisco/identity_services_engine | all versions | — |
| cisco/integrated_management_controller_supervisor | < 2.3.2.1 | 2.3.2.1 |
| cisco/intersight_virtual_appliance | < 1.0.9-361 | 1.0.9-361 |
| cisco/iot_operations_dashboard | all versions | — |
| cisco/network_assurance_engine | < 6.0.2 | 6.0.2 |
| cisco/network_services_orchestrator | < 5.3.5.1 | 5.3.5.1 |
| cisco/network_services_orchestrator | ≥ 5.4, < 5.4.5.2 | 5.4.5.2 |
| cisco/network_services_orchestrator | ≥ 5.5, < 5.5.4.1 | 5.5.4.1 |
| cisco/network_services_orchestrator | ≥ 5.6, < 5.6.3.1 | 5.6.3.1 |
| cisco/nexus_dashboard | < 2.1.2 | 2.1.2 |
| cisco/nexus_insights | < 6.0.2 | 6.0.2 |
| cisco/optical_network_controller | < 1.1.0 | 1.1.0 |
| cisco/packaged_contact_center_enterprise | < 11.6 | 11.6 |
| cisco/packaged_contact_center_enterprise | all versions | — |
| cisco/paging_server | < 14.4.1 | 14.4.1 |
| cisco/prime_service_catalog | < 12.1 | 12.1 |
| cisco/sd-wan_vmanage | < 20.3.4.1 | 20.3.4.1 |
| cisco/sd-wan_vmanage | ≥ 20.4, < 20.4.2.1 | 20.4.2.1 |
| cisco/sd-wan_vmanage | ≥ 20.5, < 20.5.1.1 | 20.5.1.1 |
| cisco/sd-wan_vmanage | ≥ 20.6, < 20.6.2.1 | 20.6.2.1 |
| cisco/smart_phy | < 3.2.1 | 3.2.1 |
| cisco/ucs_central | < 2.0\(1p\) | 2.0\(1p\) |
| cisco/ucs_director | < 6.8.2.0 | 6.8.2.0 |
| cisco/unified_communications_manager | < 11.5\(1\) | 11.5\(1\) |
| cisco/unified_communications_manager | < 11.5\(1\) | 11.5\(1\) |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager_im_and_presence_service | < 11.5\(1\) | 11.5\(1\) |
| cisco/unified_communications_manager_im_and_presence_service | all versions | — |
| cisco/unified_contact_center_enterprise | < 11.6\(2\) | 11.6\(2\) |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_express | < 12.5\(1\) | 12.5\(1\) |
| cisco/unified_customer_voice_portal | < 11.6 | 11.6 |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_intelligence_center | < 12.6\(1\) | 12.6\(1\) |
| cisco/unity_connection | < 11.5\(1\) | 11.5\(1\) |
| cisco/video_surveillance_operations_manager | < 7.14.4 | 7.14.4 |
| cisco/virtual_topology_system | < 2.6.7 | 2.6.7 |
| cisco/virtualized_infrastructure_manager | < 3.2.0 | 3.2.0 |
| cisco/virtualized_infrastructure_manager | ≥ 3.4.0, < 3.4.4 | 3.4.4 |
| cisco/virtualized_voice_browser | < 12.5\(1\) | 12.5\(1\) |
| cisco/wan_automation_engine | < 7.3.0.2 | 7.3.0.2 |
| cisco/webex_meetings_server | < 3.0 | 3.0 |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/workload_optimization_manager | < 3.2.1 | 3.2.1 |
| cisco/unified_sip_proxy | < 10.2.1v2 | 10.2.1v2 |
| cisco/unified_workforce_optimization | < 11.5\(1\) | 11.5\(1\) |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/fxos | all versions | — |
| cisco/automated_subsea_tuning | all versions | — |
| cisco/broadworks | all versions | — |
| cisco/cloudcenter_suite | all versions | — |
| cisco/cloudcenter_suite | all versions | — |
| cisco/cloudcenter_suite | all versions | — |
| cisco/cloudcenter_suite | all versions | — |
| cisco/cloudcenter_suite | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/common_services_platform_collector | all versions | — |
| cisco/crosswork_network_automation | all versions | — |
| cisco/crosswork_network_automation | all versions | — |
| cisco/crosswork_network_automation | all versions | — |
| cisco/crosswork_network_automation | all versions | — |
| cisco/crosswork_network_automation | all versions | — |
| cisco/cx_cloud_agent | all versions | — |
| cisco/cyber_vision | all versions | — |
| cisco/cyber_vision_sensor_management_extension | all versions | — |
| cisco/dna_center | all versions | — |
| cisco/dna_spaces | all versions | — |
| cisco/dna_spaces_connector | all versions | — |
| cisco/emergency_responder | all versions | — |
| cisco/emergency_responder | all versions | — |
| cisco/emergency_responder | all versions | — |
| cisco/enterprise_chat_and_email | all versions | — |
| cisco/enterprise_chat_and_email | all versions | — |
| cisco/enterprise_chat_and_email | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/evolved_programmable_network_manager | all versions | — |
| cisco/finesse | all versions | — |
| cisco/finesse | all versions | — |
| cisco/finesse | all versions | — |
| cisco/finesse | all versions | — |
| cisco/finesse | all versions | — |
| cisco/finesse | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/identity_services_engine | all versions | — |
| cisco/integrated_management_controller_supervisor | all versions | — |
| cisco/integrated_management_controller_supervisor | all versions | — |
| cisco/intersight_virtual_appliance | all versions | — |
| cisco/mobility_services_engine | all versions | — |
| cisco/network_assurance_engine | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_dashboard_fabric_controller | all versions | — |
| cisco/network_insights_for_data_center | all versions | — |
| cisco/network_services_orchestrator | all versions | — |
| cisco/optical_network_controller | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/paging_server | all versions | — |
| cisco/prime_service_catalog | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/sd-wan_vmanage | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/secure_firewall_threat_defense | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/smart_phy | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/ucs_central_software | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager | all versions | — |
| cisco/unified_communications_manager_im_\&_presence_service | all versions | — |
| cisco/unified_communications_manager_im_\&_presence_service | all versions | — |
| cisco/unified_computing_system | all versions | — |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_enterprise | all versions | — |
| cisco/unified_contact_center_express | all versions | — |
| cisco/unified_contact_center_express | all versions | — |
| cisco/unified_contact_center_express | all versions | — |
| cisco/unified_contact_center_express | all versions | — |
| cisco/unified_contact_center_management_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_customer_voice_portal | all versions | — |
| cisco/unified_intelligence_center | all versions | — |
| cisco/unified_intelligence_center | all versions | — |
| cisco/unified_intelligence_center | all versions | — |
| cisco/unified_intelligence_center | all versions | — |
| cisco/unified_sip_proxy | all versions | — |
| cisco/unified_sip_proxy | all versions | — |
| cisco/unified_sip_proxy | all versions | — |
| cisco/unified_sip_proxy | all versions | — |
| cisco/unified_workforce_optimization | all versions | — |
| cisco/unity_connection | all versions | — |
| cisco/unity_connection | all versions | — |
| cisco/video_surveillance_manager | all versions | — |
| cisco/video_surveillance_manager | all versions | — |
| cisco/video_surveillance_manager | all versions | — |
| cisco/video_surveillance_manager | all versions | — |
| cisco/virtual_topology_system | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/wan_automation_engine | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| cisco/webex_meetings_server | all versions | — |
| snowsoftware/snow_commander | < 8.10.0 | 8.10.0 |
| snowsoftware/vm_access_proxy | < 3.6 | 3.6 |
| bentley/synchro | ≥ 6.1, < 6.2.4.2 | 6.2.4.2 |
| bentley/synchro_4d | < 6.4.3.2 | 6.4.3.2 |
| percussion/rhythmyx | ≤ 7.3.2 | — |
| apple/xcode | < 13.3 | 13.3 |