10 CVE-2021-44228

CISA Kev Catalog Patch Exploit

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.
https://nvd.nist.gov/vuln/detail/CVE-2021-44228

References

security@apache.org Patch Exploit

http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-... Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-002... Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.html Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.html Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.... Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-... Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.html Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-002... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthentic... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthe... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cro... Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Comma... Exploit Third Party Advisory VDB Entry
http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-... Third Party Advisory VDB Entry
http://seclists.org/fulldisclosure/2022/Dec/2 Exploit Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/Jul/11 Mailing List Third Party Advisory
http://seclists.org/fulldisclosure/2022/Mar/23 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/10/1 Mailing List Mitigation Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/10/2 Mailing List Mitigation Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/10/3 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/13/1 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/13/2 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/14/4 Mailing List Third Party Advisory
http://www.openwall.com/lists/oss-security/2021/12/15/3 Mailing List Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdf Third Party Advisory
https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdf Third Party Advisory
https://github.com/cisagov/log4j-affected-db Third Party Advisory
https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md Broken Link Product US Government Resource
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228 Exploit Third Party Advisory
https://lists.debian.org/debian-lts-announce/2021/12/msg00007.html Mailing List Third Party Advisory
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora... Release Notes
https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedora... Release Notes
https://logging.apache.org/log4j/2.x/security.html Release Notes Vendor Advisory
https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44... Patch Third Party Advisory Vendor Advisory
https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032 Third Party Advisory
https://security.netapp.com/advisory/ntap-20211210-0007/ Third Party Advisory
https://support.apple.com/kb/HT213189 Third Party Advisory
https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-s... Third Party Advisory
https://twitter.com/kurtseifried/status/1469345530182455296 Broken Link Exploit Third Party Advisory
https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001 Third Party Advisory
https://www.debian.org/security/2021/dsa-5020 Mailing List Third Party Advisory
https://www.intel.com/content/www/us/en/security-center/advisory/intel-sa-006... Third Party Advisory
https://www.kb.cert.org/vuls/id/930724 Third Party Advisory US Government Resource
https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html Exploit Third Party Advisory
https://www.oracle.com/security-alerts/alert-cve-2021-44228.html Third Party Advisory
https://www.oracle.com/security-alerts/cpuapr2022.html Patch Third Party Advisory
https://www.oracle.com/security-alerts/cpujan2022.html Patch Third Party Advisory

CPE

cpe	start	end
Configuration 1
cpe:2.3:a:apache:log4j::::::::	>= 2.0.1	< 2.3.1
cpe:2.3:a:apache:log4j::::::::	>= 2.4.0	< 2.12.2
cpe:2.3:a:apache:log4j::::::::	>= 2.13.0	< 2.15.0
cpe:2.3:a:apache:log4j:2.0:-::::::
cpe:2.3:a:apache:log4j:2.0:beta9::::::
cpe:2.3:a:apache:log4j:2.0:rc1::::::
cpe:2.3:a:apache:log4j:2.0:rc2::::::
Configuration 2
AND
cpe:2.3:o:siemens:sppa-t3000_ses3000_firmware::::::::
Running on/with
cpe:2.3:h:siemens:sppa-t3000_ses3000:-:::::::*
Configuration 3
cpe:2.3:a:siemens:captial::::::::		< 2019.1
cpe:2.3:a:siemens:captial:2019.1:-::::::
cpe:2.3:a:siemens:captial:2019.1:sp1912::::::
cpe:2.3:a:siemens:comos::::::::
cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.0:::::::*
cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.1:::::::*
cpe:2.3:a:siemens:desigo_cc_advanced_reports:4.2:::::::*
cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.0:::::::*
cpe:2.3:a:siemens:desigo_cc_advanced_reports:5.1:::::::*
cpe:2.3:a:siemens:desigo_cc_info_center:5.0:::::::*
cpe:2.3:a:siemens:desigo_cc_info_center:5.1:::::::*
cpe:2.3:a:siemens:e-car_operation_center::::::::		< 2021-12-13
cpe:2.3:a:siemens:energy_engage:3.1:::::::*
cpe:2.3:a:siemens:energyip:8.5:::::::*
cpe:2.3:a:siemens:energyip:8.6:::::::*
cpe:2.3:a:siemens:energyip:8.7:::::::*
cpe:2.3:a:siemens:energyip:9.0:::::::*
cpe:2.3:a:siemens:energyip_prepay:3.7:::::::*
cpe:2.3:a:siemens:energyip_prepay:3.8:::::::*
cpe:2.3:a:siemens:gma-manager::::::::		< 8.6.2j-398
cpe:2.3:a:siemens:head-end_system_universal_device_integration_system::::::::
cpe:2.3:a:siemens:industrial_edge_management::::::::
cpe:2.3:a:siemens:industrial_edge_management_hub::::::::		< 2021-12-13
cpe:2.3:a:siemens:logo!_soft_comfort::::::::
cpe:2.3:a:siemens:mendix::::::::
cpe:2.3:a:siemens:mindsphere::::::::		< 2021-12-11
cpe:2.3:a:siemens:navigator::::::::		< 2021-12-13
cpe:2.3:a:siemens:nx::::::::
cpe:2.3:a:siemens:opcenter_intelligence::::::::		<= 3.2
cpe:2.3:a:siemens:operation_scheduler::::::::		<= 1.1.3
cpe:2.3:a:siemens:sentron_powermanager:4.1:::::::*
cpe:2.3:a:siemens:sentron_powermanager:4.2:::::::*
cpe:2.3:a:siemens:siguard_dsa:4.2:::::::*
cpe:2.3:a:siemens:siguard_dsa:4.3:::::::*
cpe:2.3:a:siemens:siguard_dsa:4.4:::::::*
cpe:2.3:a:siemens:sipass_integrated:2.80:::::::*
cpe:2.3:a:siemens:sipass_integrated:2.85:::::::*
cpe:2.3:a:siemens:siveillance_command::::::::		<= 4.16.2.1
cpe:2.3:a:siemens:siveillance_control_pro::::::::
cpe:2.3:a:siemens:siveillance_identity:1.5:::::::*
cpe:2.3:a:siemens:siveillance_identity:1.6:::::::*
cpe:2.3:a:siemens:siveillance_vantage::::::::
cpe:2.3:a:siemens:siveillance_viewpoint::::::::
cpe:2.3:a:siemens:solid_edge_cam_pro::::::::
cpe:2.3:a:siemens:solid_edge_harness_design::::::::		< 2020
cpe:2.3:a:siemens:solid_edge_harness_design:2020:::::::*
cpe:2.3:a:siemens:solid_edge_harness_design:2020:-::::::
cpe:2.3:a:siemens:solid_edge_harness_design:2020:sp2002::::::
cpe:2.3:a:siemens:spectrum_power_4::::::::		< 4.70
cpe:2.3:a:siemens:spectrum_power_4:4.70:-::::::
cpe:2.3:a:siemens:spectrum_power_4:4.70:sp7::::::
cpe:2.3:a:siemens:spectrum_power_4:4.70:sp8::::::
cpe:2.3:a:siemens:spectrum_power_7::::::::		< 2.30
cpe:2.3:a:siemens:spectrum_power_7:2.30:::::::*
cpe:2.3:a:siemens:spectrum_power_7:2.30:-::::::
cpe:2.3:a:siemens:spectrum_power_7:2.30:sp2::::::
cpe:2.3:a:siemens:teamcenter::::::::
cpe:2.3:a:siemens:vesys::::::::		< 2019.1
cpe:2.3:a:siemens:vesys:2019.1:::::::*
cpe:2.3:a:siemens:vesys:2019.1:-::::::
cpe:2.3:a:siemens:vesys:2019.1:sp1912::::::
cpe:2.3:a:siemens:xpedition_enterprise:-:::::::*
cpe:2.3:a:siemens:xpedition_package_integrator:-:::::::*
Configuration 4
cpe:2.3:a:intel:audio_development_kit:-:::::::*
cpe:2.3:a:intel:computer_vision_annotation_tool:-:::::::*
cpe:2.3:a:intel:data_center_manager::::::::		< 5.1
cpe:2.3:a:intel:genomics_kernel_library:-:::::::*
cpe:2.3:a:intel:oneapi_sample_browser:-:::::eclipse::
cpe:2.3:a:intel:secure_device_onboard:-:::::::*
cpe:2.3:a:intel:sensor_solution_firmware_development_kit:-:::::::*
cpe:2.3:a:intel:system_debugger:-:::::::*
cpe:2.3:a:intel:system_studio:-:::::::*
Configuration 5
cpe:2.3:o:debian:debian_linux:9.0:::::::*
cpe:2.3:o:debian:debian_linux:10.0:::::::*
cpe:2.3:o:debian:debian_linux:11.0:::::::*
Configuration 6
cpe:2.3:o:fedoraproject:fedora:34:::::::*
cpe:2.3:o:fedoraproject:fedora:35:::::::*
Configuration 7
cpe:2.3:a:sonicwall:email_security::::::::		< 10.0.12
Configuration 8
cpe:2.3:a:netapp:active_iq_unified_manager:-:::::linux::
cpe:2.3:a:netapp:active_iq_unified_manager:-:::::vmware_vsphere::
cpe:2.3:a:netapp:active_iq_unified_manager:-:::::windows::
cpe:2.3:a:netapp:cloud_insights:-:::::::*
cpe:2.3:a:netapp:cloud_manager:-:::::::*
cpe:2.3:a:netapp:cloud_secure_agent:-:::::::*
cpe:2.3:a:netapp:oncommand_insight:-:::::::*
cpe:2.3:a:netapp:ontap_tools:-:::::vmware_vsphere::
cpe:2.3:a:netapp:snapcenter:-:::::vmware_vsphere::
Configuration 9
cpe:2.3:a:cisco:advanced_malware_protection_virtual_private_cloud_appliance::::::::		< 3.5.4
cpe:2.3:a:cisco:automated_subsea_tuning::::::::		< 2.1.0
cpe:2.3:a:cisco:broadworks::::::::		< 2021.11_1.162
cpe:2.3:a:cisco:business_process_automation::::::::		< 3.0.000.115
cpe:2.3:a:cisco:business_process_automation::::::::	>= 3.1.000.000	< 3.1.000.044
cpe:2.3:a:cisco:business_process_automation::::::::	>= 3.2.000.000	< 3.2.000.009
cpe:2.3:a:cisco:cloud_connect::::::::		< 12.6(1)
cpe:2.3:a:cisco:cloudcenter::::::::		< 4.10.0.16
cpe:2.3:a:cisco:cloudcenter_cost_optimizer::::::::		< 5.5.2
cpe:2.3:a:cisco:cloudcenter_suite_admin::::::::		< 5.3.1
cpe:2.3:a:cisco:cloudcenter_workload_manager::::::::		< 5.5.2
cpe:2.3:a:cisco:common_services_platform_collector::::::::		< 2.9.1.3
cpe:2.3:a:cisco:common_services_platform_collector::::::::	>= 2.10.0	< 2.10.0.1
cpe:2.3:a:cisco:connected_mobile_experiences:-:::::::*
cpe:2.3:a:cisco:contact_center_domain_manager::::::::		< 12.5(1)
cpe:2.3:a:cisco:contact_center_management_portal::::::::		< 12.5(1)
cpe:2.3:a:cisco:crosswork_data_gateway::::::::		< 2.0.2
cpe:2.3:a:cisco:crosswork_data_gateway:3.0.0:::::::*
cpe:2.3:a:cisco:crosswork_network_controller::::::::		< 2.0.1
cpe:2.3:a:cisco:crosswork_network_controller:3.0.0:::::::*
cpe:2.3:a:cisco:crosswork_optimization_engine::::::::		< 2.0.1
cpe:2.3:a:cisco:crosswork_optimization_engine:3.0.0:::::::*
cpe:2.3:a:cisco:crosswork_platform_infrastructure::::::::		< 4.0.1
cpe:2.3:a:cisco:crosswork_platform_infrastructure:4.1.0:::::::*
cpe:2.3:a:cisco:crosswork_zero_touch_provisioning::::::::		< 2.0.1
cpe:2.3:a:cisco:crosswork_zero_touch_provisioning:3.0.0:::::::*
cpe:2.3:a:cisco:customer_experience_cloud_agent::::::::		< 1.12.1
cpe:2.3:a:cisco:cyber_vision_sensor_management_extension::::::::		< 4.0.3
cpe:2.3:a:cisco:data_center_network_manager::::::::		< 11.3(1)
cpe:2.3:a:cisco:data_center_network_manager:11.3(1):::::::*
cpe:2.3:a:cisco:dna_center::::::::		< 2.1.2.8
cpe:2.3:a:cisco:dna_center::::::::	>= 2.2.2.0	< 2.2.2.8
cpe:2.3:a:cisco:dna_center::::::::	>= 2.2.3.0	< 2.2.3.4
cpe:2.3:a:cisco:dna_spaces:_connector::::::::		< 2.5
cpe:2.3:a:cisco:emergency_responder::::::::		< 11.5(4)
cpe:2.3:a:cisco:enterprise_chat_and_email::::::::		< 12.0(1)
cpe:2.3:a:cisco:evolved_programmable_network_manager::::::::		<= 4.1.1
cpe:2.3:a:cisco:finesse::::::::		< 12.6(1)
cpe:2.3:a:cisco:finesse:12.6(1):::::::*
cpe:2.3:a:cisco:fog_director:-:::::::*
cpe:2.3:a:cisco:identity_services_engine::::::::		< 2.4.0
cpe:2.3:a:cisco:identity_services_engine:2.4.0:-::::::
cpe:2.3:a:cisco:integrated_management_controller_supervisor::::::::		< 2.3.2.1
cpe:2.3:a:cisco:intersight_virtual_appliance::::::::		< 1.0.9-361
cpe:2.3:a:cisco:iot_operations_dashboard:-:::::::*
cpe:2.3:a:cisco:network_assurance_engine::::::::		< 6.0.2
cpe:2.3:a:cisco:network_services_orchestrator::::::::		< 5.3.5.1
cpe:2.3:a:cisco:network_services_orchestrator::::::::	>= 5.4	< 5.4.5.2
cpe:2.3:a:cisco:network_services_orchestrator::::::::	>= 5.5	< 5.5.4.1
cpe:2.3:a:cisco:network_services_orchestrator::::::::	>= 5.6	< 5.6.3.1
cpe:2.3:a:cisco:nexus_dashboard::::::::		< 2.1.2
cpe:2.3:a:cisco:nexus_insights::::::::		< 6.0.2
cpe:2.3:a:cisco:optical_network_controller::::::::		< 1.1.0
cpe:2.3:a:cisco:packaged_contact_center_enterprise::::::::		< 11.6
cpe:2.3:a:cisco:packaged_contact_center_enterprise:11.6(1):::::::*
cpe:2.3:a:cisco:paging_server::::::::		< 14.4.1
cpe:2.3:a:cisco:prime_service_catalog::::::::		< 12.1
cpe:2.3:a:cisco:sd-wan_vmanage::::::::		< 20.3.4.1
cpe:2.3:a:cisco:sd-wan_vmanage::::::::	>= 20.4	< 20.4.2.1
cpe:2.3:a:cisco:sd-wan_vmanage::::::::	>= 20.5	< 20.5.1.1
cpe:2.3:a:cisco:sd-wan_vmanage::::::::	>= 20.6	< 20.6.2.1
cpe:2.3:a:cisco:smart_phy::::::::		< 3.2.1
cpe:2.3:a:cisco:ucs_central::::::::		< 2.0(1p)
cpe:2.3:a:cisco:ucs_director::::::::		< 6.8.2.0
cpe:2.3:a:cisco:unified_communications_manager:::::-:::*		< 11.5(1)
cpe:2.3:a:cisco:unified_communications_manager:::::session_management:::*		< 11.5(1)
cpe:2.3:a:cisco:unified_communications_manager:11.5(1):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1)::::-:::
cpe:2.3:a:cisco:unified_communications_manager:11.5(1)::::session_management:::
cpe:2.3:a:cisco:unified_communications_manager:11.5(1)su3:::::::*
cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service::::::::		< 11.5(1)
cpe:2.3:a:cisco:unified_communications_manager_im_and_presence_service:11.5(1):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise::::::::		< 11.6(2)
cpe:2.3:a:cisco:unified_contact_center_enterprise:11.6(2):::::::*
cpe:2.3:a:cisco:unified_contact_center_express::::::::		< 12.5(1)
cpe:2.3:a:cisco:unified_customer_voice_portal::::::::		< 11.6
cpe:2.3:a:cisco:unified_customer_voice_portal:11.6:::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:12.0:::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:12.5:::::::*
cpe:2.3:a:cisco:unity_connection::::::::		< 11.5(1)
cpe:2.3:a:cisco:video_surveillance_operations_manager::::::::		< 7.14.4
cpe:2.3:a:cisco:virtual_topology_system::::::::		< 2.6.7
cpe:2.3:a:cisco:virtualized_infrastructure_manager::::::::		< 3.2.0
cpe:2.3:a:cisco:virtualized_infrastructure_manager::::::::	>= 3.4.0	< 3.4.4
cpe:2.3:a:cisco:virtualized_voice_browser::::::::		< 12.5(1)
cpe:2.3:a:cisco:wan_automation_engine::::::::		< 7.3.0.2
cpe:2.3:a:cisco:webex_meetings_server::::::::		< 3.0
cpe:2.3:a:cisco:webex_meetings_server:3.0:-::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release1::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release2::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3:-:::::*
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_security_patch4::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_security_patch5::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_service_pack_2::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release3_service_pack_3::::::
cpe:2.3:a:cisco:webex_meetings_server:3.0:maintenance_release4::::::
cpe:2.3:a:cisco:webex_meetings_server:4.0:-::::::
cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release1::::::
cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release2::::::
cpe:2.3:a:cisco:webex_meetings_server:4.0:maintenance_release3::::::
cpe:2.3:a:cisco:workload_optimization_manager::::::::		< 3.2.1
cpe:2.3:o:cisco:unified_intelligence_center::::::::		< 12.6(1)
cpe:2.3:o:cisco:unified_sip_proxy::::::::		< 10.2.1v2
cpe:2.3:o:cisco:unified_workforce_optimization::::::::		< 11.5(1)
Configuration 10
AND
OR
cpe:2.3:h:cisco:firepower_1010:-:::::::*
cpe:2.3:h:cisco:firepower_1120:-:::::::*
cpe:2.3:h:cisco:firepower_1140:-:::::::*
cpe:2.3:h:cisco:firepower_1150:-:::::::*
cpe:2.3:h:cisco:firepower_2110:-:::::::*
cpe:2.3:h:cisco:firepower_2120:-:::::::*
cpe:2.3:h:cisco:firepower_2130:-:::::::*
cpe:2.3:h:cisco:firepower_2140:-:::::::*
cpe:2.3:h:cisco:firepower_4110:-:::::::*
cpe:2.3:h:cisco:firepower_4112:-:::::::*
cpe:2.3:h:cisco:firepower_4115:-:::::::*
cpe:2.3:h:cisco:firepower_4120:-:::::::*
cpe:2.3:h:cisco:firepower_4125:-:::::::*
cpe:2.3:h:cisco:firepower_4140:-:::::::*
cpe:2.3:h:cisco:firepower_4145:-:::::::*
cpe:2.3:h:cisco:firepower_4150:-:::::::*
cpe:2.3:h:cisco:firepower_9300:-:::::::*
OR
cpe:2.3:o:cisco:fxos:6.2.3:::::::*
cpe:2.3:o:cisco:fxos:6.3.0:::::::*
cpe:2.3:o:cisco:fxos:6.4.0:::::::*
cpe:2.3:o:cisco:fxos:6.5.0:::::::*
cpe:2.3:o:cisco:fxos:6.6.0:::::::*
cpe:2.3:o:cisco:fxos:6.7.0:::::::*
cpe:2.3:o:cisco:fxos:7.0.0:::::::*
cpe:2.3:o:cisco:fxos:7.1.0:::::::*
Configuration 11
cpe:2.3:a:cisco:automated_subsea_tuning:02.01.00:::::::*
cpe:2.3:a:cisco:broadworks:-:::::::*
cpe:2.3:a:cisco:cloudcenter_suite:4.10(0.15):::::::*
cpe:2.3:a:cisco:cloudcenter_suite:5.3(0):::::::*
cpe:2.3:a:cisco:cloudcenter_suite:5.4(1):::::::*
cpe:2.3:a:cisco:cloudcenter_suite:5.5(0):::::::*
cpe:2.3:a:cisco:cloudcenter_suite:5.5(1):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(000.000):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(000.001):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(000.002):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(001.000):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(001.001):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.009(001.002):::::::*
cpe:2.3:a:cisco:common_services_platform_collector:002.010(000.000):::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:006.004.000.003:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:006.005.000.:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:006.005.000.000:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.000.001:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.001.000:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.002.000:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:7.3:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.003.000:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.003.001.001:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:007.003.003:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:008.000.000:::::::*
cpe:2.3:a:cisco:connected_analytics_for_network_deployment:008.000.000.000.004:::::::*
cpe:2.3:a:cisco:crosswork_network_automation:-:::::::*
cpe:2.3:a:cisco:crosswork_network_automation:2.0.0:::::::*
cpe:2.3:a:cisco:crosswork_network_automation:3.0.0:::::::*
cpe:2.3:a:cisco:crosswork_network_automation:4.1.0:::::::*
cpe:2.3:a:cisco:crosswork_network_automation:4.1.1:::::::*
cpe:2.3:a:cisco:cx_cloud_agent:001.012:::::::*
cpe:2.3:a:cisco:cyber_vision:4.0.2:::::::*
cpe:2.3:a:cisco:cyber_vision_sensor_management_extension:4.0.2:::::::*
cpe:2.3:a:cisco:dna_center:2.2.2.8:::::::*
cpe:2.3:a:cisco:dna_spaces:-:::::::*
cpe:2.3:a:cisco:dna_spaces_connector:-:::::::*
cpe:2.3:a:cisco:emergency_responder:11.5:::::::*
cpe:2.3:a:cisco:emergency_responder:11.5(4.65000.14):::::::*
cpe:2.3:a:cisco:emergency_responder:11.5(4.66000.14):::::::*
cpe:2.3:a:cisco:enterprise_chat_and_email:12.0(1):::::::*
cpe:2.3:a:cisco:enterprise_chat_and_email:12.5(1):::::::*
cpe:2.3:a:cisco:enterprise_chat_and_email:12.6(1):::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:3.0:::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:3.1:::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:4.0:::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:4.1:::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:5.0:::::::*
cpe:2.3:a:cisco:evolved_programmable_network_manager:5.1:::::::*
cpe:2.3:a:cisco:finesse:12.5(1):su1::::::
cpe:2.3:a:cisco:finesse:12.5(1):su2::::::
cpe:2.3:a:cisco:finesse:12.6(1):-::::::
cpe:2.3:a:cisco:finesse:12.6(1):es01::::::
cpe:2.3:a:cisco:finesse:12.6(1):es02::::::
cpe:2.3:a:cisco:finesse:12.6(1):es03::::::
cpe:2.3:a:cisco:firepower_threat_defense:6.2.3:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:6.3.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:6.4.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:6.5.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:6.6.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:6.7.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:7.0.0:::::::*
cpe:2.3:a:cisco:firepower_threat_defense:7.1.0:::::::*
cpe:2.3:a:cisco:identity_services_engine:002.004(000.914):-::::::
cpe:2.3:a:cisco:identity_services_engine:002.006(000.156):-::::::
cpe:2.3:a:cisco:identity_services_engine:002.007(000.356):-::::::
cpe:2.3:a:cisco:identity_services_engine:003.000(000.458):-::::::
cpe:2.3:a:cisco:identity_services_engine:003.001(000.518):-::::::
cpe:2.3:a:cisco:identity_services_engine:003.002(000.116):-::::::
cpe:2.3:a:cisco:integrated_management_controller_supervisor:002.003(002.000):::::::*
cpe:2.3:a:cisco:integrated_management_controller_supervisor:2.3.2.0:::::::*
cpe:2.3:a:cisco:intersight_virtual_appliance:1.0.9-343:::::::*
cpe:2.3:a:cisco:mobility_services_engine:-:::::::*
cpe:2.3:a:cisco:network_assurance_engine:6.0(2.1912):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.0(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.1(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.2(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.3(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.4(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5(1):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5(2):::::::*
cpe:2.3:a:cisco:network_dashboard_fabric_controller:11.5(3):::::::*
cpe:2.3:a:cisco:network_insights_for_data_center:6.0(2.1914):::::::*
cpe:2.3:a:cisco:network_services_orchestrator:-:::::::*
cpe:2.3:a:cisco:optical_network_controller:1.1:::::::*
cpe:2.3:a:cisco:paging_server:8.3(1):::::::*
cpe:2.3:a:cisco:paging_server:8.4(1):::::::*
cpe:2.3:a:cisco:paging_server:8.5(1):::::::*
cpe:2.3:a:cisco:paging_server:9.0(1):::::::*
cpe:2.3:a:cisco:paging_server:9.0(2):::::::*
cpe:2.3:a:cisco:paging_server:9.1(1):::::::*
cpe:2.3:a:cisco:paging_server:12.5(2):::::::*
cpe:2.3:a:cisco:paging_server:14.0(1):::::::*
cpe:2.3:a:cisco:prime_service_catalog:12.1:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.3:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.4:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.5:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.6:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.6.1:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.7:::::::*
cpe:2.3:a:cisco:sd-wan_vmanage:20.8:::::::*
cpe:2.3:a:cisco:smart_phy:3.1.2:::::::*
cpe:2.3:a:cisco:smart_phy:3.1.3:::::::*
cpe:2.3:a:cisco:smart_phy:3.1.4:::::::*
cpe:2.3:a:cisco:smart_phy:3.1.5:::::::*
cpe:2.3:a:cisco:smart_phy:3.2.1:::::::*
cpe:2.3:a:cisco:smart_phy:21.3:::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0:::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1a):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1b):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1c):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1d):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1e):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1f):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1g):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1h):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1k):::::::*
cpe:2.3:a:cisco:ucs_central_software:2.0(1l):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1.17900.52):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1.18119.2):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1.18900.97):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1.21900.40):::::::*
cpe:2.3:a:cisco:unified_communications_manager:11.5(1.22900.28):::::::*
cpe:2.3:a:cisco:unified_communications_manager_im_&_presence_service:11.5(1):::::::*
cpe:2.3:a:cisco:unified_communications_manager_im_&_presence_service:11.5(1.22900.6):::::::*
cpe:2.3:a:cisco:unified_computing_system:006.008(001.000):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise:11.6(2):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise:12.0(1):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise:12.5(1):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise:12.6(1):::::::*
cpe:2.3:a:cisco:unified_contact_center_enterprise:12.6(2):::::::*
cpe:2.3:a:cisco:unified_contact_center_express:12.5(1):-::::::
cpe:2.3:a:cisco:unified_contact_center_express:12.5(1):su1::::::
cpe:2.3:a:cisco:unified_contact_center_express:12.6(1):::::::*
cpe:2.3:a:cisco:unified_contact_center_express:12.6(2):::::::*
cpe:2.3:a:cisco:unified_contact_center_management_portal:12.6(1):::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:11.6(1):::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:12.0(1):::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:12.5(1):::::::*
cpe:2.3:a:cisco:unified_customer_voice_portal:12.6(1):::::::*
cpe:2.3:a:cisco:unified_intelligence_center:12.6(1):-::::::
cpe:2.3:a:cisco:unified_intelligence_center:12.6(1):es01::::::
cpe:2.3:a:cisco:unified_intelligence_center:12.6(1):es02::::::
cpe:2.3:a:cisco:unified_intelligence_center:12.6(2):-::::::
cpe:2.3:a:cisco:unified_sip_proxy:010.000(000):::::::*
cpe:2.3:a:cisco:unified_sip_proxy:010.000(001):::::::*
cpe:2.3:a:cisco:unified_sip_proxy:010.002(000):::::::*
cpe:2.3:a:cisco:unified_sip_proxy:010.002(001):::::::*
cpe:2.3:a:cisco:unified_workforce_optimization:11.5(1):sr7::::::
cpe:2.3:a:cisco:unity_connection:11.5:::::::*
cpe:2.3:a:cisco:unity_connection:11.5(1.10000.6):::::::*
cpe:2.3:a:cisco:video_surveillance_manager:7.14(1.26):::::::*
cpe:2.3:a:cisco:video_surveillance_manager:7.14(2.26):::::::*
cpe:2.3:a:cisco:video_surveillance_manager:7.14(3.025):::::::*
cpe:2.3:a:cisco:video_surveillance_manager:7.14(4.018):::::::*
cpe:2.3:a:cisco:virtual_topology_system:2.6.6:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.1.3:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.2.1:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.2.2:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.2.3:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.3:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.4:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.5:::::::*
cpe:2.3:a:cisco:wan_automation_engine:7.6:::::::*
cpe:2.3:a:cisco:webex_meetings_server:3.0:::::::*
cpe:2.3:a:cisco:webex_meetings_server:4.0:::::::*
Configuration 12
cpe:2.3:a:snowsoftware:snow_commander::::::::		< 8.10.0
cpe:2.3:a:snowsoftware:vm_access_proxy::::::::		< 3.6
Configuration 13
cpe:2.3:a:bentley:synchro:::::pro:::*	>= 6.1	< 6.4.3.2
cpe:2.3:a:bentley:synchro_4d:::::pro:::*		< 6.2.4.2
Configuration 14
cpe:2.3:a:percussion:rhythmyx::::::::		<= 7.3.2
Configuration 15
cpe:2.3:a:apple:xcode::::::::		< 13.3

REMEDIATION

Patch

Url
https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-2021-44...
https://www.oracle.com/security-alerts/cpuapr2022.html
https://www.oracle.com/security-alerts/cpujan2022.html

EXPLOITS

Exploit-db.com

id	description	date
No known exploits

POC Github

Url
No known exploits

Other Nist (github, ...)

Url
http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Information-...
http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remote-Code-...
http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2021-002...
http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Injection.html
http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unauthentic...
http://packetstormsecurity.com/files/165673/UniFi-Network-Application-Unauthe...
http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remote-Comma...
http://seclists.org/fulldisclosure/2022/Dec/2
https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228
https://twitter.com/kurtseifried/status/1469345530182455296
https://www.nu11secur1ty.com/2021/12/cve-2021-44228.html

CAPEC

Common Attack Pattern Enumerations and Classifications

id	description	severity
No entry

Cybersecurity needs ?

Strengthen software security from the outset with our DevSecOps expertise

Integrate security right from the start of the software development cycle for more robust applications and greater customer confidence.
Our team of DevSecOps experts can help you secure your APIs, data pipelines, CI/CD chains, Docker containers and Kubernetes deployments.

Discover this offer

Soutenez No Hack Me sur Tipeee