[CVE-2021-44228] Apache Log4j2 RCE

[Anonymous]

Hello.

Our customer is running a Ruckus SmartZone (sz-100) controller.
The version of the controller is 5.1.1.0.598.

The customer asked if the SmartZone has the following this security vulnerabilities.

** Vulnerability: [CVE-2021-44228] Apache Log4j2 RCE

Thank you for your valuable answers to the above questions.

[Bpeyton]

Hi Peter were you able to find a solution? 

[Vineet_nejwala]

Hi All,

If the patch has been applied for CVE-2021-44228 then we should not be concerned of CVE-2021-45105, CVE-2021-45046 as we are not impacted.

Best Regards

Vineet

[matt_klouda]

Just in case you're tuning in, and wanted some extra info, new content is up!

https://www.youtube.com/watch?v=56_tgSApKkA

Thanks

[grodog-prod]

New KBA # 12031 for Apache Log4j2 RCE impact on UMM and FM is published at  https://support.ruckuswireless.com/articles/000012031 and also linked from the Log4j - RUCKUS Technical Support Response Center.

Allan.