Lucene search

K
nessusThis script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an affiliate thereof.APACHE_LOG4SHELL_MSRPC.NBIN
HistoryJan 12, 2022 - 12:00 a.m.

Apache Log4Shell RCE detection via callback correlation (Direct Check MSRPC)

2022-01-1200:00:00
This script is Copyright (C) 2022-2024 and is owned by Tenable, Inc. or an affiliate thereof.
www.tenable.com
59

The remote host appears to be running MSRPC. MSRPC itself is not vulnerable to Log4Shell; however, the MSRPC server could potentially be affected if it attempts to log data via a vulnerable log4j library.

This plugin requires that both the scanner and target machine have internet access.

Binary data apache_log4shell_msrpc.nbin
VendorProductVersionCPE
apachelog4jcpe:/a:apache:log4j