[CVE-2021-44228] Apache Log4j2 RCE

[dawoon_lee]

Hello.

Our customer is running a Ruckus SmartZone (sz-100) controller.
The version of the controller is 5.1.1.0.598.

The customer asked if the SmartZone has the following this security vulnerabilities.

** Vulnerability: [CVE-2021-44228] Apache Log4j2 RCE

Thank you for your valuable answers to the above questions.

[mark_pledl]

@roy_beiser This is exactly what I experienced when I upgraded my single dev node. It will be stuck there. Just do a reload in a separate cli window and it will work after restart

fine again. 

[Vineet_nejwala]

@roy_beiser

Is this too on 6.0 code ? Please confirm.

Best Regards

Vineet 

[michiel_timmers]

A node (6.0.0.0.1331) that I have patched yesterday and for which I had to do a reload is starting to have problems. SNMP stopped responding and the webgui comes up but doesn't show the username/password input boxes. Wifi still seems to be working. Anybody else seeing this behavior? 

[Greg_WiGuy]

Quite possible @ludia_it 

The SZ-124s I'm running are v5.2.2

[pmonardo]

After applying the patch, how do we know it has been successfully applied? Are there any validation steps we can take?