Exploit for log4j2-CVE-2021-44228-poc-local

kitploit · 2026-08-26

Description

Local proof of concept for CVE-2021-44228 affecting Log4j2.

Entry point

ParametermethodToCall · request body

PathADSearch.cc

Exploitation target parameter for Log4j RCE via JNDI lookup payload in ADSearch.cc request.

Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions

Siemens 6bk1602-0aa12-0tp0 Firmware< 2.7.0

All known vulnerabilities by product

Apache Log4J 1.2 Apache Log4J2 Apache Struts Astra Linux Huawei Vrp Jmsappender Linuxmint Apple Macos

CVSS 10.0 for CVE-2021-44228

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-26 07:35

Last Seen:2026-08-26 10:33

Reporter:KitPloit

Tags

Log4j2CVE-2021-44228proof of conceptlocalvulnerability

Other exploits for CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

Log4J-Mitigation-CVE-2021-44228--CVE-2021-45046--CVE-2021-45105--CVE-2021-44832

2026-08-27 KitPloitKITPLOIT

log4j-log4shell-playground

2026-08-27 KitPloitKITPLOIT

Get-log4j-Windows.ps1

2026-08-27 KitPloitKITPLOIT

log4j-CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

CVE-2021-44228-Scanner

2026-08-27 KitPloitKITPLOIT

Log4J-CVE-2021-44228-RCE

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SNATALIUS-LOG4J2-CVE-2021-44228-POC-LOCAL
# log4j2-CVE-2021-44228-poc-local

Solo una prova di concetto personale di CVE-2021-44228 su log4j2.