[CVE-2021-44228] Apache Log4j2 RCE

[dawoon_lee]

Hello.

Our customer is running a Ruckus SmartZone (sz-100) controller.
The version of the controller is 5.1.1.0.598.

The customer asked if the SmartZone has the following this security vulnerabilities.

** Vulnerability: [CVE-2021-44228] Apache Log4j2 RCE

Thank you for your valuable answers to the above questions.

[Vineet_nejwala]

Hello @dawoon_lee 

This vulnerability is really new and our Engineering has been notified about this issue to check if this vulnerability is affecting us and how we can mitigate the effects. We do understood this is a critical situation and we will update you with the information from our internal team. Below is our link where we will soon add our response.

https://support.ruckuswireless.com/security

Best Regards

Vineet

[dawoon_lee]

@vineet_nejawala 

I look forward to your sincere reply.
Thank you.

[JTakaMT]

Thanks for responding Vineet. We are looking forward to a Security Bulletin/Announcement update from the Ruckus team soon. 

[Vineet_nejwala]

@michael_thompson_e3bsvnhy1spi9

Thank you. The bulletin would be updated soon, so far we have been confirmed that code 3.6.2 is safe from this vulnerability and further is being tested.

Best Regards

Vineet