CVE Listesine Dön
CVE-2021-44228 CISA KEV · Aktif SömürülüyorFidye Yazılımı İlişkili

Improper input validation in Apache Log4j

CVSS Skor

10.0

EPSS İhtimal

%100.0

Risk Skoru

20.0

Yayın

4 yıl önce

Overview (Genel Bakış)Public Exploits (11)Newsroom (Haberler)Vulnerability Timeline
Resmî yama doğrulandı

Etkilenen ürün ve sürüm için yayımlanan güvenlik güncellemesini uygulayın.

Envanterimdeki Etkisi

Yalnızca hesabınıza eklediğiniz kişisel ürünler değerlendirilir; kurumsal envanter burada görünmez.

Oturum kontrol ediliyor…

Zafiyet Açıklaması

DayBreach CVE AI Araştırması

CVE-2021-44228 için toplanan üretici, dağıtım, yama ve güvenlik kaynağı kayıtlarını karşılaştırıp kanıt bağlantılı bir açıklama hazırlayalım.

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

IMPACT — Etkilenen Ürünler ve Yazılımlar

Affected Products

The following products are affected by CVE-2021-44228 vulnerability. Even if our threat engine is aware of the exact versions of the products that are affected, the information is represented below.

IDVENDORPRODUCTACTION
1siemens6bk1602-0aa12-0tp0 firmware İncele
2siemens6bk1602-0aa12-0tp0 İncele
3siemens6bk1602-0aa22-0tp0 firmware İncele
4siemens6bk1602-0aa22-0tp0 İncele
5siemens6bk1602-0aa32-0tp0 firmware İncele
6siemens6bk1602-0aa32-0tp0 İncele
7siemens6bk1602-0aa42-0tp0 firmware İncele
8siemens6bk1602-0aa42-0tp0 İncele
9siemens6bk1602-0aa52-0tp0 firmware İncele
10siemens6bk1602-0aa52-0tp0 İncele
11apachelog4j İncele
12apachelog4j İncele
13apachelog4j İncele
14apachelog4j İncele
15siemenssppa-t3000 ses3000 firmware İncele
16siemenssppa-t3000 ses3000 İncele
17siemenscapital İncele
18siemenscapital İncele
19siemenscomos İncele
20siemensdesigo cc advanced reports İncele
21siemensdesigo cc advanced reports İncele
22siemensdesigo cc advanced reports İncele
23siemensdesigo cc advanced reports İncele
24siemensdesigo cc advanced reports İncele
25siemensdesigo cc advanced reports İncele
26siemensdesigo cc info center İncele
27siemensdesigo cc info center İncele
28siemense-car operation center İncele
29siemensenergy engage İncele
30siemensenergyip İncele
31siemensenergyip İncele
32siemensenergyip İncele
33siemensenergyip İncele
34siemensenergyip prepay İncele
35siemensgma-manager İncele
36siemenshead-end system universal device integration system İncele
37siemensindustrial edge management İncele
38siemensindustrial edge management hub İncele
39siemensLOGO! Soft Comfort İncele
40siemensmendix İncele
41siemensmindsphere İncele
42siemensnavigator İncele
43siemensnx İncele
44siemensopcenter intelligence İncele
45siemensoperation scheduler İncele
46siemenssentron powermanager İncele
47siemenssentron powermanager İncele
48siemenssiguard dsa İncele
49siemenssipass integrated İncele
50siemenssipass integrated İncele
51siemenssiveillance command İncele
52siemenssiveillance control pro İncele
53siemenssiveillance identity İncele
54siemenssiveillance identity İncele
55siemenssiveillance vantage İncele
56siemenssiveillance viewpoint İncele
57siemenssolid edge cam pro İncele
58siemenssolid edge harness design İncele
59siemenssolid edge harness design İncele
60siemensspectrum power 4 İncele
61siemensspectrum power 4 İncele
62siemensspectrum power 7 İncele
63siemensspectrum power 7 İncele
64siemensteamcenter İncele
65siemensvesys İncele
66siemensvesys İncele
67siemensvesys İncele
68siemensvesys İncele
69siemensxpedition enterprise İncele
70siemensxpedition package integrator İncele
71intelcomputer vision annotation tool İncele
72inteldatacenter manager İncele
73intelgenomics kernel library İncele
74inteloneapi sample browser İncele
75intelsecure device onboard İncele
76intelsystem studio İncele
77debiandebian linux İncele
78debiandebian linux İncele
79debiandebian linux İncele
80fedoraprojectfedora İncele
81fedoraprojectfedora İncele
82sonicwallemail security İncele
83netappactive iq unified manager İncele
84netappbrocade san navigator İncele
85netappcloud insights İncele
86netappcloud manager İncele
87netappcloud secure agent İncele
88netapponcommand insight İncele
89netappontap tools İncele
90netappsnapcenter İncele
91netappsolidfire & hci storage node İncele
92netappsolidfire enterprise sds İncele
93ciscoadvanced malware protection virtual private cloud appliance İncele
94ciscoautomated subsea tuning İncele
95ciscobroadworks İncele
96ciscobusiness process automation İncele
97ciscobusiness process automation İncele
98ciscobusiness process automation İncele
99ciscocloud connect İncele
100ciscocloudcenter İncele
101ciscocloudcenter cost optimizer İncele
102ciscocloudcenter suite admin İncele
103ciscocloudcenter workload manager İncele
104ciscocommon services platform collector İncele
105ciscocommon services platform collector İncele
106ciscoconnected mobile experiences İncele
107ciscocontact center domain manager İncele
108ciscocontact center management portal İncele
109ciscocrosswork data gateway İncele
110ciscocrosswork data gateway İncele
111ciscocrosswork network controller İncele
112ciscocrosswork network controller İncele
113ciscocrosswork optimization engine İncele
114ciscocrosswork optimization engine İncele
115ciscocrosswork platform infrastructure İncele
116ciscocrosswork platform infrastructure İncele
117ciscocrosswork zero touch provisioning İncele
118ciscocrosswork zero touch provisioning İncele
119ciscocustomer experience cloud agent İncele
120ciscocyber vision sensor management extension İncele
121ciscodata center network manager İncele
122ciscodata center network manager İncele
123ciscodna center İncele
124ciscodna center İncele
125ciscodna center İncele
126ciscodna spaces\ İncele
127ciscoemergency responder İncele
128ciscoenterprise chat and email İncele
129ciscoevolved programmable network manager İncele
130ciscofinesse İncele
131ciscofinesse İncele
132ciscofog director İncele
133ciscoidentity services engine İncele
134ciscoidentity services engine İncele
135ciscointegrated management controller supervisor İncele
136ciscointersight virtual appliance İncele
137ciscoiot operations dashboard İncele
138cisconetwork assurance engine İncele
139cisconetwork services orchestrator İncele
140cisconetwork services orchestrator İncele
141cisconetwork services orchestrator İncele
142cisconetwork services orchestrator İncele
143cisconexus dashboard İncele
144cisconexus insights İncele
145ciscooptical network controller İncele
146ciscopackaged contact center enterprise İncele
147ciscopackaged contact center enterprise İncele
148ciscopaging server İncele
149ciscoprime service catalog İncele
150ciscosd-wan vmanage İncele
151ciscosd-wan vmanage İncele
152ciscosd-wan vmanage İncele
153ciscosd-wan vmanage İncele
154ciscosmart phy İncele
155ciscoucs central İncele
156ciscoucs director İncele
157ciscounified communications manager İncele
158ciscounified communications manager İncele
159ciscounified communications manager İncele
160ciscounified communications manager im and presence service İncele
161ciscounified communications manager im and presence service İncele
162ciscounified contact center enterprise İncele
163ciscounified contact center enterprise İncele
164ciscounified contact center express İncele
165ciscounified customer voice portal İncele
166ciscounified customer voice portal İncele
167ciscounified customer voice portal İncele
168ciscounified customer voice portal İncele
169ciscounified intelligence center İncele
170ciscounity connection İncele
171ciscovideo surveillance operations manager İncele
172ciscovirtual topology system İncele
173ciscovirtualized infrastructure manager İncele
174ciscovirtualized infrastructure manager İncele
175ciscovirtualized voice browser İncele
176ciscowan automation engine İncele
177ciscowebex meetings server İncele
178ciscowebex meetings server İncele
179ciscowebex meetings server İncele
180ciscoworkload optimization manager İncele
181ciscounified sip proxy İncele
182ciscounified workforce optimization İncele
183ciscofirepower 1010 İncele
184ciscofirepower 1120 İncele
185ciscofirepower 1140 İncele
186ciscofirepower 1150 İncele
187ciscofirepower 2110 İncele
188ciscofirepower 2120 İncele
189ciscofirepower 2130 İncele
190ciscofirepower 2140 İncele
191ciscofirepower 4110 İncele
192ciscofirepower 4112 İncele
193ciscofirepower 4115 İncele
194ciscofirepower 4120 İncele
195ciscofirepower 4125 İncele
196ciscofirepower 4140 İncele
197ciscofirepower 4145 İncele
198ciscofirepower 4150 İncele
199ciscofirepower 9300 İncele
200ciscofxos İncele
Total Affected Vendor: 8|Products: 200

RED HAT CSAF/VEX — Ürün Etki Kontrolü

Red Hat bu CVE için henüz bir CSAF/VEX etki kaydı yayımlamamış. Bu durum “etkilenmiyor” anlamına gelmez.

SCORING — CVSS Çoklu Kaynak Skoru

CVSS Scores

The Common Vulnerability Scoring System is a standardized framework for assessing the severity of vulnerabilities in software and systems. We collect and display CVSS scores from various sources for each CVE.

SCOREVERSIONSEVERITYVECTORSOURCE
10.0CVSS V31CRITICALCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:HNVD
9.3CVSS V2—AV:N/AC:M/Au:N/C:C/I:C/A:CNVD

Yama ve İyileştirme Rehberi (Solution)

Solution & Remediation Advisory

Yama doğrulandı

6 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

nvd

NVD tarafından Patch olarak etiketlenmiş referans

Kaynağı aç
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Kaynağı aç
nvd

NVD tarafından Patch olarak etiketlenmiş referans

Kaynağı aç
reference

Yama veya çözüm referansı

Kaynağı aç
reference

Yama veya çözüm referansı

Kaynağı aç
reference

Yama veya çözüm referansı

Kaynağı aç
canonical

For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Etkilenen ürün ve sürümü yukarıdaki kaynak kanıtlarıyla doğrulayın.
İnternete açık servislerde erişimi kısıtlayın ve ağ segmentasyonu uygulayın.
Kanıtta belirtilen resmî güncellemeyi yalnızca eşleşen ürün ve sürüme uygulayın.
Sunucu günlüklerini ve ağ uçlarını anormal çalıştırma belirtileri için izleyin.

Public exploit ve aktif sömürü durumu

Doğrulanmış exploit istihbaratı

CVE-2021-44228 için veritabanında 11 public PoC/exploit kaynağı bulunuyor. Doğrudan kaynak bağlantıları için Public Exploits sekmesini açın.

Zafiyet Dağılımı ve Saldırı Kalıpları (CWE & CAPEC)

CWE - Common Weakness Enumeration

While CVE identifies specific instances of vulnerabilities, CWE categorizes the common flaws or weaknesses that can lead to vulnerabilities. CVE-2021-44228 is associated with the following CWEs:

CWE-20: Improper Input ValidationCWE-400: Common Weakness Enumeration Entry CWE-400CWE-502: Deserialization of Untrusted DataCWE-917: Common Weakness Enumeration Entry CWE-917

Common Attack Pattern Enumeration and Classification (CAPEC)

Common Attack Pattern Enumeration and Classification (CAPEC) stores attack patterns, which are descriptions of the common attributes and approaches employed by adversaries to exploit the CVE-2021-44228 weaknesses.

CAPEC-66: SQL InjectionCAPEC-126: Path TraversalCAPEC-28: OS Command Injection

Saldırı Vektörü ve Erişilebilirlik Karakteristiği

ErişimAğ üzerinden
YetkiGerekmiyor
KullanıcıGerekmiyor

Resmi Kaynaklar ve Danışma Bültenleri

http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remote-Code-Execution.htmlnvdhttp://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2021-0028.htmlnvdhttp://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.htmlnvdhttp://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.htmlnvdhttp://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Execution.htmlnvdhttp://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Execution-Word-Bypassing.htmlnvdhttp://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scanner.htmlnvdhttp://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.10.x-Cross-Site-Scripting-Command-Injection.htmlnvdhttp://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remote-Code-Execution.htmlnvdhttp://seclists.org/fulldisclosure/2022/Jul/11nvd

CVSS Vektör Radar Grafiği

10.0 / 10
Attack VectorNetworkComplexityLowPrivilegesNoneUser Interact.NoneConfidentialityLowIntegrityNoneAvailabilityHigh

Vulnerability Scoring Details

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Attack VectorNetwork (Ağ)
Attack ComplexityLow (Düşük)
Privileges RequiredNone (Gerekmiyor)
User InteractionNone (Gerekmiyor)
Confidentiality (Gizlilik)Low (Düşük)
Integrity (Bütünlük)None (Yok)
Availability (Erişilebilirlik)High (Yüksek)

Yama doğrulandı

6 doğrulanmış yama veya düzeltilmiş sürüm kanıtı bulundu.

Üreticiyi takip et

S
siemens logo
siemens
A
apache logo
apache
I
intel logo
intel
D
debian logo
debian
F
fedoraproject logo
fedoraproject
S
sonicwall logo
sonicwall

Zafiyet Türü (CWE & CAPEC)

CWE-20 CWE-400 CWE-502 CWE-917

İlgili Benzer Açıklar

Bu açığı API ile alın

Etkilenen ürünler, sürüm aralıkları, istismar durumu ve yama bilgisi tek istekte; ücretsiz anahtarla.

Ücretsiz anahtar alBelgeler
curl -H "x-api-key: $DAYBREACH_API_KEY" \
  "https://api.enginteksut.com.tr/api/v1/intel/cves/CVE-2021-44228"