CVE-2021-44228

CRITICALImmediate

Published:Dec 10, 2021(4 years ago)

Modified:Feb 20, 2026

Remote ExploitNo Auth RequiredNo InteractionScope ChangesLow Complexity

Vulnerability Description

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

Attack Characteristics

Network AccessLow ComplexityNo Auth NeededNo User Interaction

🤖

AI analysis not yet available

Plain-English explanation, risk summary, and remediation steps will appear here once AI analysis is complete.

No Fix Known

No patch has been released yet. Apply workarounds or mitigations where available.

Affected Software

373

Vendor	Product	Versions	Fixed In
siemens	6bk1602-0aa12-0tp0_firmware	2.7.0	-
siemens	6bk1602-0aa22-0tp0_firmware	2.7.0

Timeline

Published
CVE disclosed publicly
Dec 10, 20214 years ago
Last Modified
Most recent update
Feb 20, 20262 months ago
Indexed to CVEInsight
Added to this platform
Mar 29, 20261 month ago

References

103

https://cert-portal.siemens.com/productcert/pdf/ssa-661247.pdfThird Party Advisory
http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remot...Third Party Advisory
http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2...Third Party Advisory

CVSS Score

v3.1

10.0/ 10.0

CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

At a Glance

373

Affected Products

103

References

siemens / 6bk1602-0aa12-0tp0_firmware

http://packetstormsecurity.com/files/165261/Apache-Log4j2-2.14.1-Infor...Exploit

http://packetstormsecurity.com/files/165270/Apache-Log4j2-2.14.1-Remot...Exploit

http://packetstormsecurity.com/files/165281/Log4j2-Log4Shell-Regexes.h...Third Party Advisory

http://packetstormsecurity.com/files/165282/Log4j-Payload-Generator.ht...Third Party Advisory

http://packetstormsecurity.com/files/165306/L4sh-Log4j-Remote-Code-Exe...Third Party Advisory

http://packetstormsecurity.com/files/165307/Log4j-Remote-Code-Executio...Third Party Advisory

http://packetstormsecurity.com/files/165311/log4j-scan-Extensive-Scann...Broken Link

http://packetstormsecurity.com/files/165371/VMware-Security-Advisory-2...Exploit

http://packetstormsecurity.com/files/165532/Log4Shell-HTTP-Header-Inje...Exploit

http://packetstormsecurity.com/files/165642/VMware-vCenter-Server-Unau...Exploit

http://packetstormsecurity.com/files/165673/UniFi-Network-Application-...Exploit

http://packetstormsecurity.com/files/167794/Open-Xchange-App-Suite-7.1...Third Party Advisory

http://packetstormsecurity.com/files/167917/MobileIron-Log4Shell-Remot...Exploit

http://packetstormsecurity.com/files/171626/AD-Manager-Plus-7122-Remot...Third Party Advisory

http://seclists.org/fulldisclosure/2022/Dec/2Exploit

http://seclists.org/fulldisclosure/2022/Jul/11Mailing List

http://seclists.org/fulldisclosure/2022/Mar/23Mailing List

http://www.openwall.com/lists/oss-security/2021/12/10/1Mailing List

http://www.openwall.com/lists/oss-security/2021/12/10/2Mailing List

http://www.openwall.com/lists/oss-security/2021/12/10/3Mailing List

http://www.openwall.com/lists/oss-security/2021/12/13/1Mailing List

http://www.openwall.com/lists/oss-security/2021/12/13/2Mailing List

http://www.openwall.com/lists/oss-security/2021/12/14/4Mailing List

http://www.openwall.com/lists/oss-security/2021/12/15/3Mailing List

https://cert-portal.siemens.com/productcert/pdf/ssa-397453.pdfThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-479842.pdfThird Party Advisory

https://cert-portal.siemens.com/productcert/pdf/ssa-714170.pdfThird Party Advisory

https://github.com/cisagov/log4j-affected-dbThird Party Advisory

https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIS...Broken Link

https://github.com/nu11secur1ty/CVE-mitre/tree/main/CVE-2021-44228Exploit

https://lists.debian.org/debian-lts-announce/2021/12/msg00007.htmlMailing List

https://lists.fedoraproject.org/archives/list/package-announce%40lists...Release Notes

https://logging.apache.org/log4j/2.x/security.htmlRelease Notes

https://msrc-blog.microsoft.com/2021/12/11/microsofts-response-to-cve-...Patch

https://psirt.global.sonicwall.com/vuln-detail/SNWLID-2021-0032Third Party Advisory

https://security.netapp.com/advisory/ntap-20211210-0007/Third Party Advisory

https://support.apple.com/kb/HT213189Third Party Advisory

https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/...Third Party Advisory

https://twitter.com/kurtseifried/status/1469345530182455296Broken Link

https://www.bentley.com/en/common-vulnerability-exposure/be-2022-0001Third Party Advisory

https://www.debian.org/security/2021/dsa-5020Mailing List

https://www.intel.com/content/www/us/en/security-center/advisory/intel...Third Party Advisory

https://www.kb.cert.org/vuls/id/930724Third Party Advisory

https://www.nu11secur1ty.com/2021/12/cve-2021-44228.htmlExploit

https://www.oracle.com/security-alerts/alert-cve-2021-44228.htmlThird Party Advisory

https://www.oracle.com/security-alerts/cpuapr2022.htmlPatch

https://www.oracle.com/security-alerts/cpujan2022.htmlPatch

http://packetstormsecurity.com/files/165225/Apache-Log4j2-2.14.1-Remot...Third Party Advisory

http://packetstormsecurity.com/files/165260/VMware-Security-Advisory-2...Third Party Advisory