Exploit for checkmk-log4j-scanner

kitploit · 2026-09-01

Description

Checkmk extension that scans JAR files to detect vulnerable Log4j2 versions for CVE-2021-44228.

Entry point

ParametermethodToCall · request body

PathADSearch.cc

Exploitation target parameter for Log4j RCE via JNDI lookup payload in ADSearch.cc request.

Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions

Siemens 6bk1602-0aa12-0tp0 Firmware< 2.7.0

All known vulnerabilities by product

Apache Log4J 1.2 Apache Log4J2 Apache Struts Astra Linux Huawei Vrp Jmsappender Linuxmint Apple Macos

CVSS 10.0 for CVE-2021-44228

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

References

https://github.com/logpresso/CVE-2021-44228-Scanner#how-it-works

https://github.com/logpresso/CVE-2021-44228-Scanner

https://github.com/logpresso/CVE-2021-44228-Scanner/blob/main/LICENSE

Exploit Details

Modified:2026-09-01 23:57

Last Seen:2026-09-03 00:18

Reporter:KitPloit

Tags

checkmk extensionLog4j2CVE-2021-44228JAR scanningversion detection

Other exploits for CVE-2021-44228

burp-intruder-payloads

2026-09-02 khmersecGITHUB

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

LOGJ4_PocShell_CVE-2021-44228

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

Log4J-Log4Shell-CVE-2021-44228-Spring-Boot-Test-Service

2026-09-02 KitPloitKITPLOIT

CVE-2021-44228-Demo

2026-09-02 KitPloitKITPLOIT

2026-09-02 KitPloitKITPLOIT

Exploit Code

MARKDOWN15 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-INETTGMBH-CHECKMK-LOG4J-SCANNER
![\(inett GmbH\)](https://assets.kitploit.com/production/public/readmes/26994/477c3c11a237675a4ce11588b8d6bf2dfd117e00a497cdf847019f85bec5c62b.jpg)

# check_mk 확장 프로그램: log4j2 `CVE-2021-44228` 점검

이 플러그인은 logpresso/CVE-2021-44228-Scanner (Apache License 2.0)를 기반으로 합니다.

### 작동 방식

다음 5단계로 실행됩니다.

  1. 모든 `.jar`, `.war`, `.ear`, `.aar` 파일을 재귀적으로 찾습니다.
  2. JAR 파일에서 `META-INF/maven/org.apache.logging.log4j/log4j-core/pom.properties` 항목을 찾습니다.
  3. groupId, artifactId, version을 읽습니다.
  4. log4j2 버전을 비교하고 취약한 버전을 출력합니다.