New Local Attack Vector Expands the Attack Surface of Log4j Vulnerability

🗓️ 18 Dec 2021 12:18:00Reported by The Hacker NewsType

New Local Attack Vector Expands Log4j Vulnerability. WebSockets enable local exploitation of Log4j vulnerability, expands attack surface. Additional Log4j vulnerabilities discovered, including CVE-2021-45105

Reporter	Title	Published	Views	Family All 2007
0day.today	Apache Log4j 2 - Remote Code Execution Exploit	14 Dec 202100:00	–	zdt
0day.today	Log4Shell HTTP Header Injection Exploit	13 Jan 202200:00	–	zdt
0day.today	VMware vCenter Server Unauthenticated Log4Shell JNDI Injection Remote Code Execution Exploit	20 Jan 202200:00	–	zdt
0day.today	UniFi Network Application Unauthenticated Log4Shell Remote Code Execution Exploit	24 Jan 202200:00	–	zdt
0day.today	MobileIron Log4Shell Remote Command Execution Exploit	4 Aug 202200:00	–	zdt
0day.today	Intel Data Center Manager 5.1 Local Privilege Escalation Vulnerability	10 Dec 202200:00	–	zdt
0day.today	AD Manager Plus 7122 - Remote Code Execution Vulnerability	2 Apr 202300:00	–	zdt
0day.today	Apache Log4j2 2.14.1 - Information Disclosure Exploit	14 Dec 202100:00	–	zdt
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	17 Dec 202108:32	–	githubexploit
GithubExploit	Exploit for Uncontrolled Resource Consumption in Siemens 6Bk1602-0Aa12-0Tp0_Firmware	11 Dec 202116:08	–	githubexploit

20 Dec 2021 05:03Current

0.6Low risk

Vulners AI Score0.6

CVSS 29.3

CVSS 3.110

EPSS0.99999