topic I'm trying to find out if ICX6450-48p switches are affected by the Recent Nodej4 vulnerability in ICX Switches

I'm trying to find out if ICX6450-48p switches are affected by the Recent Nodej4 vulnerability

julian_fletche1 — Mon, 20 Dec 2021 11:08:37 GMT

Can anyone point me to any resources where I can find out if ICX6450-48p are affected by the Recent Nodej4 vulnerability?

We are running 07.4.00kT311
I appreciate they are not officially supported anymore AFAICT , but our many switches continue to work fine; we need to know if they are vulnerable (or not).

Thanks

Julian

Birmingham. UK

Re: I'm trying to find out if ICX6450-48p switches are affected by the Recent Nodej4 vulnerability

kpfleming — Mon, 20 Dec 2021 11:40:46 GMT

If you are referring to the Log4j vulnerability (don't think there is anything out there called Node4j or Nodej4), I think you have nothing to be concerned about. I haven't seen any evidence of any Java/JVM-based software in the ICX products.

Re: I'm trying to find out if ICX6450-48p switches are affected by the Recent Nodej4 vulnerability

DarrelRhodes — Mon, 20 Dec 2021 11:48:44 GMT

Hi Julian,

As noted by Kevin; ICX is not affected by the Log4j vulnerability.

Full details of what products are or are not affected is here: https://support.ruckuswireless.com/log4j-ruckus-technical-support-response-center

Best,
Darrel.