Exploit for log4j2_CVE-2021-44228

kitploit · 2026-08-27

Description

Log4j2 CVE-2021-44228 test environment running on Java 17 at local address 127.0.0.1:8006.

Entry point

ParametermethodToCall · request body

PathADSearch.cc

Exploitation target parameter for Log4j RCE via JNDI lookup payload in ADSearch.cc request.

Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions

Siemens 6bk1602-0aa12-0tp0 Firmware< 2.7.0

All known vulnerabilities by product

Apache Log4J 1.2 Apache Log4J2 Apache Struts Astra Linux Huawei Vrp Jmsappender Linuxmint Apple Macos

CVSS 10.0 for CVE-2021-44228

10.0

HIGH SEVERITY

Version 3.1

VectorCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector:NETWORK

Attack Complexity:LOW

Privileges Required:NONE

User Interaction:NONE

Scope:CHANGED

Confidentiality:HIGH

Integrity:HIGH

Availability:HIGH

CVE Information

Exploit Details

Modified:2026-08-27 03:08

Last Seen:2026-08-27 19:46

Reporter:KitPloit

Tags

log4j2CVE-2021-44228test environmentJava 17local server

Other exploits for CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

NodeSecurityShield

2026-08-27 KitPloitKITPLOIT

log4j2-CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

log4j-log4shell-affected

2026-08-27 KitPloitKITPLOIT

2026-08-27 KitPloitKITPLOIT

spring-boot-log4j-cve-2021-44228-docker-lab

2026-08-27 KitPloitKITPLOIT

cloudrasp-log4j2

2026-08-27 KitPloitKITPLOIT

PS-CVE-2021-44228

2026-08-27 KitPloitKITPLOIT

Exploit Code

MARKDOWN4 lines

## https://sploitus.com/exploit?id=KITPLOIT:TOOLS-GITHUB-SQSEC-LOG4J2_CVE-2021-44228
# log4j2 환경 테스트 사용, 문제 발생 시 개인 책임

제 테스트 환경은 java17이며, 필요하다면 직접 변경한 후 프로젝트를 다시 가져오면 됩니다. 환경을 시작한 후 주소: http://127.0.0.1:8006/test ![image](https://assets.kitploit.com/production/public/readmes/32823/7d9c0f77ed38ae6003300b45776ba4e14855a84806488c173442519e32e0904f.png)