Exploit / PoCcriticalExploited in the wild

Threat Advisory: Critical Apache Log4j vulnerability being exploited in the wild

Cisco TalosDec 10, 2021 · 19:37 UTC (Dec 10, 2021)12 min read3 · 2 reads

Read at blog.talosintelligence.com

Analyze this story with Vani AIImpact, who is affected and what defenders should do, in a new chat

CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2021-45105 CVE-2021-44832

Tags: cve-2021-44228 cve-2021-45046 cve-2021-45105 cve-2021-44832 exploit

Vulnerabilities mentioned

All

CVE	Vulnerability	CVSS	EPSS	Signals	Published
CVE-2021-44228	JNDI Injection Remote Code Execution in Apache Log4j2 (Log4Shell)	10.0	100%	KEVRansomwarePoC ×9	Dec 10, 2021 KEV Dec 10, 2021
CVE-2021-44832	Apache Log4j2 versions 2.0-beta7 through 2.17.0 (excluding security fix releases 2.3.2 and 2.12.4) are vulnerable to a remote code execution (RCE) attack when…	6.6	98%		Dec 28, 2021
CVE-2021-45046	Remote Code Execution in Apache Log4j2 via Incomplete Log4Shell Fix	9.0	100%	KEVRansomwarePoC	Dec 14, 2021 KEV May 1, 2023
CVE-2021-45105	Apache Log4j2 versions 2.0-alpha1 through 2.16.0 (excluding 2.12.3 and 2.3.1) did not protect from uncontrolled recursion from self-referential lookups	5.9	100%		Dec 18, 2021

From the original article

12 min read at blog.talosintelligence.com

Additional coverage and IOCs; additional detection capabilities for customers via Cisco Global Threat Alerts. Additional mitigation guidance; updated coverage information. Added additional vulnerability and mitigation information; added section on guidance for developers; timeline.

Cisco Talos

blog.talosintelligence.com

Read the full article at Cisco Talos

A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.