CVE-2021-44228
Known Exploited (CISA KEV)CRITICAL
10.0
CVSS Severity Score
Vulnerability Description
Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
Affected Platforms (CPE)
💻
Siemens
6bk1602 0aa12 0tp0 Firmware
< 2.7.0💻
Siemens
6bk1602 0aa22 0tp0 Firmware
< 2.7.0💻
Siemens
6bk1602 0aa32 0tp0 Firmware
< 2.7.0💻
Siemens
6bk1602 0aa42 0tp0 Firmware
< 2.7.0💻
Siemens
6bk1602 0aa52 0tp0 Firmware
< 2.7.0📦
Apache
Log4j
>= 2.0.1 and < 2.3.1📦
Apache
Log4j
>= 2.4.0 and < 2.12.2📦
Apache
Log4j
>= 2.13.0 and < 2.15.0📦
Apache
Log4j
= 2.0📦
Apache
Log4j
= 2.0📦
Apache
Log4j
= 2.0📦
Apache
Log4j
= 2.0💻
Siemens
Sppa T3000 Ses3000 Firmware
All versions📦
Siemens
Capital
< 2019.1📦
Siemens
Capital
= 2019.1📦
Siemens
Capital
= 2019.1📦
Siemens
Comos
< 10.4.2📦
Siemens
Desigo Cc Advanced Reports
= 3.0📦
Siemens
Desigo Cc Advanced Reports
= 4.0📦
Siemens
Desigo Cc Advanced Reports
= 4.1📦
Siemens
Desigo Cc Advanced Reports
= 4.2📦
Siemens
Desigo Cc Advanced Reports
= 5.0📦
Siemens
Desigo Cc Advanced Reports
= 5.1📦
Siemens
Desigo Cc Info Center
= 5.0📦
Siemens
Desigo Cc Info Center
= 5.1📦
Siemens
E Car Operation Center
< 2021-12-13📦
Siemens
Energy Engage
= 3.1📦
Siemens
Energyip
= 8.5📦
Siemens
Energyip
= 8.6📦
Siemens
Energyip
= 8.7📦
Siemens
Energyip
= 9.0📦
Siemens
Energyip Prepay
< 3.8.0.12📦
Siemens
Gma Manager
< 8.6.2j-398📦
Siemens
Head End System Universal Device Integration System
All versions📦
Siemens
Industrial Edge Management
All versions📦
Siemens
Industrial Edge Management Hub
< 2021-12-13📦
Siemens
Logo\! Soft Comfort
All versions📦
Siemens
Mendix
All versions📦
Siemens
Mindsphere
< 2021-12-16📦
Siemens
Navigator
< 2021-12-13📦
Siemens
Nx
All versions📦
Siemens
Opcenter Intelligence
>= 3.2 and < 3.5📦
Siemens
Operation Scheduler
<= 1.1.3📦
Siemens
Sentron Powermanager
= 4.1📦
Siemens
Sentron Powermanager
= 4.2📦
Siemens
Siguard Dsa
>= 4.2 and < 4.4.1📦
Siemens
Sipass Integrated
= 2.80📦
Siemens
Sipass Integrated
= 2.85📦
Siemens
Siveillance Command
<= 4.16.2.1📦
Siemens
Siveillance Control Pro
All versions📦
Siemens
Siveillance Identity
= 1.5📦
Siemens
Siveillance Identity
= 1.6📦
Siemens
Siveillance Vantage
All versions📦
Siemens
Siveillance Viewpoint
All versions📦
Siemens
Solid Edge Cam Pro
All versions📦
Siemens
Solid Edge Harness Design
< 2020📦
Siemens
Solid Edge Harness Design
= 2020📦
Siemens
Solid Edge Harness Design
= 2020📦
Siemens
Solid Edge Harness Design
= 2020📦
Siemens
Spectrum Power 4
< 4.70📦
Siemens
Spectrum Power 4
= 4.70📦
Siemens
Spectrum Power 4
= 4.70📦
Siemens
Spectrum Power 4
= 4.70📦
Siemens
Spectrum Power 7
< 2.30📦
Siemens
Spectrum Power 7
= 2.30📦
Siemens
Spectrum Power 7
= 2.30📦
Siemens
Spectrum Power 7
= 2.30📦
Siemens
Teamcenter
All versions📦
Siemens
Vesys
< 2019.1📦
Siemens
Vesys
= 2019.1📦
Siemens
Vesys
= 2019.1📦
Siemens
Vesys
= 2019.1📦
Siemens
Vesys
= 2020.1📦
Siemens
Vesys
= 2021.1📦
Siemens
Xpedition Enterprise
All versions📦
Siemens
Xpedition Package Integrator
All versions📦
Intel
Computer Vision Annotation Tool
All versions📦
Intel
Datacenter Manager
< 5.1📦
Intel
Genomics Kernel Library
All versions📦
Intel
Oneapi Sample Browser
All versions📦
Intel
Secure Device Onboard
All versions📦
Intel
System Studio
All versions💻
Debian
Debian Linux
= 9.0💻
Debian
Debian Linux
= 10.0💻
Debian
Debian Linux
= 11.0💻
Fedoraproject
Fedora
= 34💻
Fedoraproject
Fedora
= 35📦
Sonicwall
Email Security
< 10.0.13📦
Netapp
Active Iq Unified Manager
All versions📦
Netapp
Active Iq Unified Manager
All versions📦
Netapp
Active Iq Unified Manager
All versions📦
Netapp
Brocade San Navigator
All versions📦
Netapp
Cloud Insights
All versions📦
Netapp
Cloud Manager
All versions📦
Netapp
Cloud Secure Agent
All versions📦
Netapp
Oncommand Insight
All versions📦
Netapp
Ontap Tools
All versions📦
Netapp
Snapcenter
All versions📦
Netapp
Solidfire \& Hci Storage Node
All versions📦
Netapp
Solidfire Enterprise Sds
All versions📦
Cisco
Advanced Malware Protection Virtual Private Cloud Appliance
< 3.5.4📦
Cisco
Automated Subsea Tuning
< 2.1.0📦
Cisco
Broadworks
< 2021.11_1.162📦
Cisco
Business Process Automation
< 3.0.000.115📦
Cisco
Business Process Automation
>= 3.1.000.000 and < 3.1.000.044📦
Cisco
Business Process Automation
>= 3.2.000.000 and < 3.2.000.009📦
Cisco
Cloud Connect
< 12.6\(1\)📦
Cisco
Cloudcenter
< 4.10.0.16📦
Cisco
Cloudcenter Cost Optimizer
< 5.5.2📦
Cisco
Cloudcenter Suite Admin
< 5.3.1📦
Cisco
Cloudcenter Workload Manager
< 5.5.2📦
Cisco
Common Services Platform Collector
< 2.9.1.3📦
Cisco
Common Services Platform Collector
>= 2.10.0 and < 2.10.0.1📦
Cisco
Connected Mobile Experiences
All versions📦
Cisco
Contact Center Domain Manager
< 12.5\(1\)📦
Cisco
Contact Center Management Portal
< 12.5\(1\)📦
Cisco
Crosswork Data Gateway
< 2.0.2📦
Cisco
Crosswork Data Gateway
= 3.0.0📦
Cisco
Crosswork Network Controller
< 2.0.1📦
Cisco
Crosswork Network Controller
= 3.0.0📦
Cisco
Crosswork Optimization Engine
< 2.0.1📦
Cisco
Crosswork Optimization Engine
= 3.0.0📦
Cisco
Crosswork Platform Infrastructure
< 4.0.1📦
Cisco
Crosswork Platform Infrastructure
= 4.1.0📦
Cisco
Crosswork Zero Touch Provisioning
< 2.0.1📦
Cisco
Crosswork Zero Touch Provisioning
= 3.0.0📦
Cisco
Customer Experience Cloud Agent
< 1.12.1📦
Cisco
Cyber Vision Sensor Management Extension
< 4.0.3📦
Cisco
Data Center Network Manager
< 11.3\(1\)📦
Cisco
Data Center Network Manager
= 11.3\(1\)📦
Cisco
Dna Center
< 2.1.2.8📦
Cisco
Dna Center
>= 2.2.2.0 and < 2.2.2.8📦
Cisco
Dna Center
>= 2.2.3.0 and < 2.2.3.4📦
Cisco
Dna Spaces\
< 2.5📦
Cisco
Emergency Responder
< 11.5\(4\)📦
Cisco
Enterprise Chat And Email
< 12.0\(1\)📦
Cisco
Evolved Programmable Network Manager
<= 4.1.1📦
Cisco
Finesse
< 12.6\(1\)📦
Cisco
Finesse
= 12.6\(1\)📦
Cisco
Fog Director
All versions📦
Cisco
Identity Services Engine
< 2.4.0📦
Cisco
Identity Services Engine
= 2.4.0📦
Cisco
Integrated Management Controller Supervisor
< 2.3.2.1📦
Cisco
Intersight Virtual Appliance
< 1.0.9-361📦
Cisco
Iot Operations Dashboard
All versions📦
Cisco
Network Assurance Engine
< 6.0.2📦
Cisco
Network Services Orchestrator
< 5.3.5.1📦
Cisco
Network Services Orchestrator
>= 5.4 and < 5.4.5.2📦
Cisco
Network Services Orchestrator
>= 5.5 and < 5.5.4.1📦
Cisco
Network Services Orchestrator
>= 5.6 and < 5.6.3.1📦
Cisco
Nexus Dashboard
< 2.1.2📦
Cisco
Nexus Insights
< 6.0.2📦
Cisco
Optical Network Controller
< 1.1.0📦
Cisco
Packaged Contact Center Enterprise
< 11.6📦
Cisco
Packaged Contact Center Enterprise
= 11.6\(1\)📦
Cisco
Paging Server
< 14.4.1📦
Cisco
Prime Service Catalog
< 12.1📦
Cisco
Sd Wan Vmanage
< 20.3.4.1📦
Cisco
Sd Wan Vmanage
>= 20.4 and < 20.4.2.1📦
Cisco
Sd Wan Vmanage
>= 20.5 and < 20.5.1.1📦
Cisco
Sd Wan Vmanage
>= 20.6 and < 20.6.2.1📦
Cisco
Smart Phy
< 3.2.1📦
Cisco
Ucs Central
< 2.0\(1p\)📦
Cisco
Ucs Director
< 6.8.2.0📦
Cisco
Unified Communications Manager
< 11.5\(1\)📦
Cisco
Unified Communications Manager
< 11.5\(1\)📦
Cisco
Unified Communications Manager
= 11.5\(1\)📦
Cisco
Unified Communications Manager
= 11.5\(1\)📦
Cisco
Unified Communications Manager
= 11.5\(1\)📦
Cisco
Unified Communications Manager
= 11.5\(1\)su3📦
Cisco
Unified Communications Manager Im And Presence Service
< 11.5\(1\)📦
Cisco
Unified Communications Manager Im And Presence Service
= 11.5\(1\)📦
Cisco
Unified Contact Center Enterprise
< 11.6\(2\)📦
Cisco
Unified Contact Center Enterprise
= 11.6\(2\)📦
Cisco
Unified Contact Center Express
< 12.5\(1\)📦
Cisco
Unified Customer Voice Portal
< 11.6📦
Cisco
Unified Customer Voice Portal
= 11.6📦
Cisco
Unified Customer Voice Portal
= 12.0📦
Cisco
Unified Customer Voice Portal
= 12.5📦
Cisco
Unified Intelligence Center
< 12.6\(1\)📦
Cisco
Unity Connection
< 11.5\(1\)📦
Cisco
Video Surveillance Operations Manager
< 7.14.4📦
Cisco
Virtual Topology System
< 2.6.7📦
Cisco
Virtualized Infrastructure Manager
< 3.2.0📦
Cisco
Virtualized Infrastructure Manager
>= 3.4.0 and < 3.4.4📦
Cisco
Virtualized Voice Browser
< 12.5\(1\)📦
Cisco
Wan Automation Engine
< 7.3.0.2📦
Cisco
Webex Meetings Server
< 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 4.0📦
Cisco
Webex Meetings Server
= 4.0📦
Cisco
Webex Meetings Server
= 4.0📦
Cisco
Webex Meetings Server
= 4.0📦
Cisco
Workload Optimization Manager
< 3.2.1💻
Cisco
Unified Sip Proxy
< 10.2.1v2💻
Cisco
Unified Workforce Optimization
< 11.5\(1\)💻
Cisco
Fxos
= 6.2.3💻
Cisco
Fxos
= 6.3.0💻
Cisco
Fxos
= 6.4.0💻
Cisco
Fxos
= 6.5.0💻
Cisco
Fxos
= 6.6.0💻
Cisco
Fxos
= 6.7.0💻
Cisco
Fxos
= 7.0.0💻
Cisco
Fxos
= 7.1.0📦
Cisco
Automated Subsea Tuning
= 02.01.00📦
Cisco
Broadworks
All versions📦
Cisco
Cloudcenter Suite
= 4.10.0.15📦
Cisco
Cloudcenter Suite
= 5.3.0📦
Cisco
Cloudcenter Suite
= 5.4.1📦
Cisco
Cloudcenter Suite
= 5.5.0📦
Cisco
Cloudcenter Suite
= 5.5.1📦
Cisco
Common Services Platform Collector
= 002.009\(000.000\)📦
Cisco
Common Services Platform Collector
= 002.009\(000.001\)📦
Cisco
Common Services Platform Collector
= 002.009\(000.002\)📦
Cisco
Common Services Platform Collector
= 002.009\(001.000\)📦
Cisco
Common Services Platform Collector
= 002.009\(001.001\)📦
Cisco
Common Services Platform Collector
= 002.009\(001.002\)📦
Cisco
Common Services Platform Collector
= 002.010\(000.000\)📦
Cisco
Crosswork Network Automation
All versions📦
Cisco
Crosswork Network Automation
= 2.0.0📦
Cisco
Crosswork Network Automation
= 3.0.0📦
Cisco
Crosswork Network Automation
= 4.1.0📦
Cisco
Crosswork Network Automation
= 4.1.1📦
Cisco
Cx Cloud Agent
= 001.012📦
Cisco
Cyber Vision
= 4.0.2📦
Cisco
Cyber Vision Sensor Management Extension
= 4.0.2📦
Cisco
Dna Center
= 2.2.2.8📦
Cisco
Dna Spaces
All versions📦
Cisco
Dna Spaces Connector
All versions📦
Cisco
Emergency Responder
= 11.5📦
Cisco
Emergency Responder
= 11.5\(4.65000.14\)📦
Cisco
Emergency Responder
= 11.5\(4.66000.14\)📦
Cisco
Enterprise Chat And Email
= 12.0\(1\)📦
Cisco
Enterprise Chat And Email
= 12.5\(1\)📦
Cisco
Enterprise Chat And Email
= 12.6\(1\)📦
Cisco
Evolved Programmable Network Manager
= 3.0📦
Cisco
Evolved Programmable Network Manager
= 3.1📦
Cisco
Evolved Programmable Network Manager
= 4.0📦
Cisco
Evolved Programmable Network Manager
= 4.1📦
Cisco
Evolved Programmable Network Manager
= 5.0📦
Cisco
Evolved Programmable Network Manager
= 5.1📦
Cisco
Finesse
= 12.5\(1\)📦
Cisco
Finesse
= 12.5\(1\)📦
Cisco
Finesse
= 12.6\(1\)📦
Cisco
Finesse
= 12.6\(1\)📦
Cisco
Finesse
= 12.6\(1\)📦
Cisco
Finesse
= 12.6\(1\)📦
Cisco
Firepower Threat Defense
= 6.2.3📦
Cisco
Firepower Threat Defense
= 6.3.0📦
Cisco
Firepower Threat Defense
= 6.4.0📦
Cisco
Firepower Threat Defense
= 6.5.0📦
Cisco
Firepower Threat Defense
= 6.6.0📦
Cisco
Firepower Threat Defense
= 6.7.0📦
Cisco
Firepower Threat Defense
= 7.0.0📦
Cisco
Firepower Threat Defense
= 7.1.0📦
Cisco
Identity Services Engine
= 002.004\(000.914\)📦
Cisco
Identity Services Engine
= 002.006\(000.156\)📦
Cisco
Identity Services Engine
= 002.007\(000.356\)📦
Cisco
Identity Services Engine
= 003.000\(000.458\)📦
Cisco
Identity Services Engine
= 003.001\(000.518\)📦
Cisco
Identity Services Engine
= 003.002\(000.116\)📦
Cisco
Integrated Management Controller Supervisor
= 002.003\(002.000\)📦
Cisco
Integrated Management Controller Supervisor
= 2.3.2.0📦
Cisco
Intersight Virtual Appliance
= 1.0.9-343📦
Cisco
Mobility Services Engine
All versions📦
Cisco
Network Assurance Engine
= 6.0\(2.1912\)📦
Cisco
Network Dashboard Fabric Controller
= 11.0\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.1\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.2\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.3\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.4\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.5\(1\)📦
Cisco
Network Dashboard Fabric Controller
= 11.5\(2\)📦
Cisco
Network Dashboard Fabric Controller
= 11.5\(3\)📦
Cisco
Network Insights For Data Center
= 6.0\(2.1914\)📦
Cisco
Network Services Orchestrator
All versions📦
Cisco
Optical Network Controller
= 1.1📦
Cisco
Paging Server
= 8.3\(1\)📦
Cisco
Paging Server
= 8.4\(1\)📦
Cisco
Paging Server
= 8.5\(1\)📦
Cisco
Paging Server
= 9.0\(1\)📦
Cisco
Paging Server
= 9.0\(2\)📦
Cisco
Paging Server
= 9.1\(1\)📦
Cisco
Paging Server
= 12.5\(2\)📦
Cisco
Paging Server
= 14.0\(1\)📦
Cisco
Prime Service Catalog
= 12.1📦
Cisco
Sd Wan Vmanage
= 20.3📦
Cisco
Sd Wan Vmanage
= 20.4📦
Cisco
Sd Wan Vmanage
= 20.5📦
Cisco
Sd Wan Vmanage
= 20.6📦
Cisco
Sd Wan Vmanage
= 20.6.1📦
Cisco
Sd Wan Vmanage
= 20.7📦
Cisco
Sd Wan Vmanage
= 20.8📦
Cisco
Smart Phy
= 3.1.2📦
Cisco
Smart Phy
= 3.1.3📦
Cisco
Smart Phy
= 3.1.4📦
Cisco
Smart Phy
= 3.1.5📦
Cisco
Smart Phy
= 3.2.1📦
Cisco
Smart Phy
= 21.3📦
Cisco
Ucs Central Software
= 2.0📦
Cisco
Ucs Central Software
= 2.0\(1a\)📦
Cisco
Ucs Central Software
= 2.0\(1b\)📦
Cisco
Ucs Central Software
= 2.0\(1c\)📦
Cisco
Ucs Central Software
= 2.0\(1d\)📦
Cisco
Ucs Central Software
= 2.0\(1e\)📦
Cisco
Ucs Central Software
= 2.0\(1f\)📦
Cisco
Ucs Central Software
= 2.0\(1g\)📦
Cisco
Ucs Central Software
= 2.0\(1h\)📦
Cisco
Ucs Central Software
= 2.0\(1k\)📦
Cisco
Ucs Central Software
= 2.0\(1l\)📦
Cisco
Unified Communications Manager
= 11.5\(1.17900.52\)📦
Cisco
Unified Communications Manager
= 11.5\(1.18119.2\)📦
Cisco
Unified Communications Manager
= 11.5\(1.18900.97\)📦
Cisco
Unified Communications Manager
= 11.5\(1.21900.40\)📦
Cisco
Unified Communications Manager
= 11.5\(1.22900.28\)📦
Cisco
Unified Communications Manager Im \& Presence Service
= 11.5\(1\)📦
Cisco
Unified Communications Manager Im \& Presence Service
= 11.5\(1.22900.6\)📦
Cisco
Unified Computing System
= 006.008\(001.000\)📦
Cisco
Unified Contact Center Enterprise
= 12.0\(1\)📦
Cisco
Unified Contact Center Enterprise
= 12.5\(1\)📦
Cisco
Unified Contact Center Enterprise
= 12.6\(1\)📦
Cisco
Unified Contact Center Enterprise
= 12.6\(2\)📦
Cisco
Unified Contact Center Express
= 12.5\(1\)📦
Cisco
Unified Contact Center Express
= 12.5\(1\)📦
Cisco
Unified Contact Center Express
= 12.6\(1\)📦
Cisco
Unified Contact Center Express
= 12.6\(2\)📦
Cisco
Unified Contact Center Management Portal
= 12.6\(1\)📦
Cisco
Unified Customer Voice Portal
= 11.6\(1\)📦
Cisco
Unified Customer Voice Portal
= 12.0\(1\)📦
Cisco
Unified Customer Voice Portal
= 12.5\(1\)📦
Cisco
Unified Customer Voice Portal
= 12.6\(1\)📦
Cisco
Unified Intelligence Center
= 12.6\(1\)📦
Cisco
Unified Intelligence Center
= 12.6\(1\)📦
Cisco
Unified Intelligence Center
= 12.6\(1\)📦
Cisco
Unified Intelligence Center
= 12.6\(2\)📦
Cisco
Unified Sip Proxy
= 010.000\(000\)📦
Cisco
Unified Sip Proxy
= 010.000\(001\)📦
Cisco
Unified Sip Proxy
= 010.002\(000\)📦
Cisco
Unified Sip Proxy
= 010.002\(001\)📦
Cisco
Unified Workforce Optimization
= 11.5\(1\)📦
Cisco
Unity Connection
= 11.5📦
Cisco
Unity Connection
= 11.5\(1.10000.6\)📦
Cisco
Video Surveillance Manager
= 7.14\(1.26\)📦
Cisco
Video Surveillance Manager
= 7.14\(2.26\)📦
Cisco
Video Surveillance Manager
= 7.14\(3.025\)📦
Cisco
Video Surveillance Manager
= 7.14\(4.018\)📦
Cisco
Virtual Topology System
= 2.6.6📦
Cisco
Wan Automation Engine
= 7.1.3📦
Cisco
Wan Automation Engine
= 7.2.1📦
Cisco
Wan Automation Engine
= 7.2.2📦
Cisco
Wan Automation Engine
= 7.2.3📦
Cisco
Wan Automation Engine
= 7.3📦
Cisco
Wan Automation Engine
= 7.4📦
Cisco
Wan Automation Engine
= 7.5📦
Cisco
Wan Automation Engine
= 7.6📦
Cisco
Webex Meetings Server
= 3.0📦
Cisco
Webex Meetings Server
= 4.0📦
Snowsoftware
Snow Commander
< 8.10.0📦
Snowsoftware
Vm Access Proxy
< 3.6📦
Bentley
Synchro
>= 6.1 and < 6.2.4.2📦
Bentley
Synchro 4d
< 6.4.3.2📦
Percussion
Rhythmyx
<= 7.3.2📦
Apple