NewsSiemens ProductCERT
SSA-661247 V1.0: Apache Log4j Vulnerability (CVE-2021-44228, Log4Shell) - Impact to Siemens Products
Linked advisories
- CVE-2021-44228Apache Log4j2 — Apache Log4j2 Remote Code Execution Vulnerability
- CVE-2021-44228Remote code injection in Log4j
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.3.12 security update
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.1.5)
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.3.1)
- CVE-2021-44228Red Hat Security Advisory: Red Hat Fuse 7.10.0 release and security update
- CVE-2021-44228Red Hat Security Advisory: Openshift Logging security and bug update (5.2.4)
- CVE-2021-44228Red Hat Security Advisory: Red Hat JBoss Enterprise Application Platform 7.1.9 on RHEL 7 security update
- CVE-2021-44832maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-44832Improper Input Validation and Injection in Apache Log4j2
- CVE-2021-45046Apache Log4j2 — Apache Log4j2 Deserialization of Untrusted Data Vulnerability
- CVE-2021-45046Incomplete fix for Apache Log4j vulnerability
- CVE-2021-45105maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-45105Apache Log4j2 vulnerable to Improper Input Validation and Uncontrolled Recursion
- CVE-2021-44228Siemens ProductCERT Advisory SSA-397453
- CVE-2021-44228Siemens ProductCERT Advisory SSA-479842
- CVE-2021-44228Siemens ProductCERT Advisory SSA-661247
- CVE-2021-44228Siemens ProductCERT Advisory SSA-714170
- CVE-2021-45105Oracle Fusion Middleware: Mehrere Schwachstellen
- CVE-2021-45105Siemens ProductCERT Advisory SSA-501673
- CVE-2021-44228Apache Log4j2: Deserialisierung nicht vertrauenswürdiger Daten
- CVE-2021-44832maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-45046Apache Log4j: Expression-Language-Injection
- CVE-2021-45105maven org.apache.logging.log4j:log4j-core: unzureichende Eingabevalidierung
- CVE-2021-44832Siemens ProductCERT Advisory SSA-784507
- CVE-2021-44228Debian apache-log4j2: security update
- CVE-2021-45046Debian apache-log4j2: security update
- CVE-2021-45105Debian apache-log4j2: security update
- CVE-2021-44228[Update] Immediate Actions to Protect Against Exploitation of the Apache Java Logging Library Log4j Vulnerability
- CVE-2021-44228[UPDATE] Zero-Day Vulnerability in Apache Java Logging Library Log4j
Affected vendors and products
- Apache Software Foundation Apache Log4j Core
- Apache Software Foundation Apache Log4j
- Apache Software Foundation Apache Log4j2
- Apple Apple Xcode
- Bentley
- Cisco Business Process Automation
- Cisco Cisco Common Services Platform Collector Software
- Cisco Cisco Connected Mobile Experiences 10.2(1.0)
- Cisco Cisco Crosswork Network Change Automation
- Cisco Cisco CX Cloud Agent
- Cisco Cisco Cyber Vision
- Cisco Cisco Data Center Network Manager
More on SSA-661247
Other advisories
Source: https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf
ID