Sploitus

4 exploited vulnerabilities in Apache Log4J2

Vulnerabilities with publicly known exploits

Vendors
Apache, Astra Linux, Huawei, Linux Mint, Apple, Suse
With known exploits
4
Affected Siemens 6bk1602-0aa12-0tp0 Firmware versions
< 2.7.0
Affected Apache log4j versions
< 2.12.2, 2.16.0, 2.0, 2.3.2, 2.12.4, 2.17.1, 2.3.1, 2.12.3

Vulnerabilities with exploits

Highest CVSS first — 4 of these already have exploit code on Sploitus

CVE-2021-44228 365 exploits
CVSS 10.0 CRITICAL 2021-12-10FIX AVAILABLE
log4jpwnExploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-45046 43 exploits
CVSS 9.0 CRITICAL 2021-12-14FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_FirmwareExploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-44832 9 exploits
CVSS 8.5 HIGH 2021-12-18FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_FirmwareExploit for Improper Input Validation in Siemens 6Bk1602-0Aa12-0Tp0_Firmware
CVE-2021-45105 21 exploits
CVSS 7.8 HIGH 2021-12-18FIX AVAILABLE
Exploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_FirmwareExploit for Deserialization of Untrusted Data in Siemens 6Bk1602-0Aa12-0Tp0_Firmware