Lucene search
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.UBIQUITI_UNIFI_NETWORK_LOG4SHELL.NBINHistoryDec 31, 2021 - 12:00 a.m.
Ubiquiti UniFi Network Log4Shell Direct Check (CVE-2021-44228)
2021-12-3100:00:00
This script is Copyright (C) 2021-2024 and is owned by Tenable, Inc. or an Affiliate thereof.
www.tenable.com
945
A remote code execution vulnerability exists in Ubiquiti UniFi Network in the bundled Apache Log4j logging library.
Apache Log4j is vulnerable due to insufficient protections on message lookup substitutions when dealing with user controlled input. A remote, unauthenticated attacker can exploit this, via a web request, to execute arbitrary code with the permission level of the running Java process.
Binary data ubiquiti_unifi_network_log4shell.nbin| Vendor | Product | Version | CPE |
|---|---|---|---|
| ui | unifi_controller | cpe:/a:ui:unifi_controller |
Related
trellix
trellix
Log4J and The Memory That Knew Too Much
2022-01-19 00:00:00
ibm
ibm
threatpost
threatpost
Multi-Ransomwared Victims Have It Coming–Podcast
2022-03-10 14:00:32
What the Log4Shell Bug Means for SMBs: Experts Weigh In
2021-12-14 17:54:47
wallarmlab
wallarmlab
Update on Log4Shell (CVE-2021-44228)
2021-12-10 20:22:36
trendmicroblog
trendmicroblog
Patch Now: Apache Log4j Vulnerability Called Log4Shell Actively Exploited
2021-12-13 00:00:00
hackerone
hackerone
U.S. Dept Of Defense: ███ ████████ running a vulnerable log4j
2021-12-31 00:55:49
U.S. Dept Of Defense: ██████████ running a vulnerable log4j
2021-12-11 00:16:38
qualysblog
qualysblog
Log4Shell – Follow This Multi-Layered Approach for Detection and Remediation
2021-12-28 18:00:00
How to Make Log4Shell Remediation Quick & Effective
2022-01-11 16:58:48
What’s Next After Log4Shell?
2023-02-22 03:36:56
githubexploit
githubexploit
Exploit for Deserialization of Untrusted Data in Apache Log4J
2021-12-11 13:28:52
Exploit for Deserialization of Untrusted Data in Apache Log4J
2022-01-27 07:07:30
Exploit for Improper Input Validation in Apache Log4J
2021-12-21 08:13:35
rapid7blog
rapid7blog
[Security Nation] Mike Hanley of GitHub on the Log4j Vulnerability
2022-01-19 21:47:30
Log4Shell Makes Its Appearance in Hacker Chatter: 4 Observations
2021-12-14 21:05:17
What's New in InsightVM and Nexpose: Q1 2022 in Review
2022-04-19 17:52:17
cisa
cisa
osv
osv
Critical vulnerability in log4j may affect generated PEAR projects
2021-12-16 21:01:51
Apache Log4j Remote Code Execution
2021-12-14 21:07:14
hivepro
hivepro
Iranian hackers leveraged Log4Shell to penetrate US federal agency
2022-11-17 12:28:57
Lazarus’s Operation Blacksmith Deploys Novel Dlang RATs
2023-12-13 06:46:17
msrc
msrc
CVE-2021-44228 Apache Log4j 2 に対するマイクロソフトの対応
2021-12-12 08:00:00
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 05:28:18
Microsoft’s Response to CVE-2021-44228 Apache Log4j 2
2021-12-12 08:00:00
nessus
nessus
Cisco SD-WAN vManage Log4j Remote Code Execution (cisco-sa-apache-log4j-qRuKNEbd)
2022-05-16 00:00:00
FreeBSD : graylog -- include log4j patches (3fadd7e4-f8fb-45a0-a218-8fd6423c338f)
2021-12-13 00:00:00
Ubuntu 16.04 ESM : Apache Log4j 2 vulnerability (USN-5192-2)
2021-12-17 00:00:00
veracode
veracode
Remote Code Execution (RCE)
2021-12-10 15:09:45
kaspersky
kaspersky
KLA12392 RCE vulnerability in Microsoft Azure
2021-12-16 00:00:00
KLA12395 RCE vulnerability in Microsoft SQL Server
2021-12-16 00:00:00
KLA12393 RCE vulnerability in Microsoft System Center
2021-12-16 00:00:00
impervablog
impervablog
Analytics Are Essential for Effective Database Security
2022-01-13 15:23:02
Continuing to Stay Ahead of CVE-2021-44228: Addressing Your Top Questions
2021-12-14 22:55:49
How We’re Protecting Customers & Staying Ahead of CVE-2021-44228
2021-12-11 02:31:39
talosblog
talosblog
How CVSS 4.0 changes (or doesn’t) the way we see vulnerability severity
2024-02-21 13:54:48
cisa_kev
cisa_kev
Apache Log4j2 Remote Code Execution Vulnerability
2021-12-10 00:00:00
packetstorm
packetstorm
Log4Shell HTTP Header Injection
2022-01-12 00:00:00
Intel Data Center Manager 5.1 Local Privilege Escalation
2022-12-09 00:00:00
MobileIron Log4Shell Remote Command Execution
2022-08-03 00:00:00
amd
amd
AMD Response to Log4j (Log4Shell) Vulnerability
2021-12-15 00:00:00
mssecure
mssecure
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
redhat
redhat
openvas
openvas
openSUSE: Security Advisory for logback (openSUSE-SU-2021:1613-1)
2022-02-01 00:00:00
Debian: Security Advisory (DLA-2842-1)
2021-12-13 00:00:00
akamaiblog
akamaiblog
Threat Intelligence on Log4j CVE: Key Findings and Their Implications
2021-12-17 19:30:00
fedora
fedora
[SECURITY] Fedora 34 Update: log4j-2.16.0-1.fc34
2021-12-22 01:14:26
cve
cve
CVE-2021-44228
2021-12-10 10:15:09
github
github
mmpc
mmpc
MERCURY and DEV-1084: Destructive attack on hybrid environment
2023-04-07 16:00:00
ics
ics
Sensormatic PowerManage (Update A)
2022-03-08 12:00:00
Related for UBIQUITI_UNIFI_NETWORK_LOG4SHELL.NBIN