Exploit for Log4J-CVE-2021-44228-RCE

kitploit · 2026-08-27

Description

RCE in Log4J (CVE-2021-44228) enabling remote command execution.

Entry point

ParametermethodToCall · request body

PathADSearch.cc

Exploitation target parameter for Log4j RCE via JNDI lookup payload in ADSearch.cc request.

Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions

Siemens 6bk1602-0aa12-0tp0 Firmware< 2.7.0

All known vulnerabilities by product

Apache Log4J 1.2 Apache Log4J2 Apache Struts Astra Linux Huawei Vrp Jmsappender Linuxmint Apple Macos

CVSS 10.0 for CVE-2021-44228

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-27 07:14

Last Seen:2026-08-27 19:38

Reporter:KitPloit

Tags

Log4JRemote Code ExecutionCVE-2021-44228Command ExecutionInteractive Exploit

Other exploits for CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

log4j2-CVE-2021-44228-poc-local

2026-08-27 KitPloitKITPLOIT

Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832

2026-08-27 KitPloitKITPLOIT

log4j-log4shell-playground

2026-08-27 KitPloitKITPLOIT

Get-log4j-Windows.ps1

2026-08-27 KitPloitKITPLOIT

log4j-CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

CVE-2021-44228-Scanner

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-CORNEACRISTIAN-LOG4J-CVE-2021-44228-RCE
# Log4J (CVE-2021-44228) 명령 실행 익스플로잇

대화형 익스플로잇, 그냥 실행하세요: ./exploit.sh