What is the CVSS score of CVE-2021-44228?

CVE-2021-44228 has a CVSS 3.1 base score of 10.0 (Critical). CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H. EPSS exploitation probability: 94.4%.

Which versions of 6Bk1602 0Aa12 0Tp0 Firmware are affected by CVE-2021-44228?

CVE-2021-44228 presents critical security risk, a input validation vulnerability rated CVSS 10.0.. A patch is available.

Is there a public PoC exploit available for CVE-2021-44228?

Yes, a public proof-of-concept exploit is available for CVE-2021-44228. Prioritise patching immediately. EPSS: 94.4%.

How to fix or mitigate CVE-2021-44228?

Within 24 hours: Identify all affected systems and apply vendor patches immediately. Vendor patch is available.

6Bk1602 0Aa12 0Tp0 Firmware CVE-2021-44228

CRITICAL

Improper Input Validation (CWE-20)

2021-12-10 security@apache.org

Apache RCE 6Bk1602 0Aa12 0Tp0 Firmware 6Bk1602 0Aa22 0Tp0 Firmware 6Bk1602 0Aa32 0Tp0 Firmware 6Bk1602 0Aa42 0Tp0 Firmware 6Bk1602 0Aa52 0Tp0 Firmware Log4J Sppa T3000 Ses3000 Firmware Capital Comos Desigo Cc Advanced Reports Desigo Cc Info Center E Car Operation Center Energy Engage Energyip Energyip Prepay Gma Manager Head End System Universal Device Integration System Industrial Edge Management Industrial Edge Management Hub Logo Soft Comfort Mendix Mindsphere Navigator Nx Opcenter Intelligence Operation Scheduler Sentron Powermanager Siguard Dsa Sipass Integrated Siveillance Command Siveillance Control Pro Siveillance Identity Siveillance Vantage Siveillance Viewpoint Solid Edge Cam Pro Solid Edge Harness Design Spectrum Power 4 Spectrum Power 7 Teamcenter Vesys Xpedition Enterprise Xpedition Package Integrator Computer Vision Annotation Tool Datacenter Manager Genomics Kernel Library Oneapi Sample Browser Secure Device Onboard System Studio Debian Linux Fedora Email Security Active Iq Unified Manager Brocade San Navigator Cloud Insights Cloud Manager Cloud Secure Agent Oncommand Insight Ontap Tools Snapcenter Solidfire Hci Storage Node Solidfire Enterprise Sds Advanced Malware Protection Virtual Private Cloud Appliance Automated Subsea Tuning Broadworks Business Process Automation Cloud Connect Cloudcenter Cloudcenter Cost Optimizer Cloudcenter Suite Admin Cloudcenter Workload Manager Common Services Platform Collector Connected Mobile Experiences Contact Center Domain Manager Contact Center Management Portal Crosswork Data Gateway Crosswork Network Controller Crosswork Optimization Engine Crosswork Platform Infrastructure Crosswork Zero Touch Provisioning Customer Experience Cloud Agent Cyber Vision Sensor Management Extension Data Center Network Manager Dna Center Dna Spaces Emergency Responder Enterprise Chat And Email Evolved Programmable Network Manager Finesse Fog Director Identity Services Engine Integrated Management Controller Supervisor Intersight Virtual Appliance Iot Operations Dashboard Network Assurance Engine Network Services Orchestrator Nexus Dashboard Nexus Insights Optical Network Controller Packaged Contact Center Enterprise Paging Server Prime Service Catalog Sd Wan Vmanage Smart Phy Ucs Central Ucs Director Unified Communications Manager Unified Communications Manager Im And Presence Service Unified Contact Center Enterprise Unified Contact Center Express Unified Customer Voice Portal Unified Intelligence Center Unity Connection Video Surveillance Operations Manager Virtual Topology System Virtualized Infrastructure Manager Virtualized Voice Browser Wan Automation Engine Webex Meetings Server Workload Optimization Manager Unified Sip Proxy Unified Workforce Optimization Fxos Cloudcenter Suite Crosswork Network Automation Cx Cloud Agent Cyber Vision Dna Spaces Connector Firepower Threat Defense Mobility Services Engine Network Dashboard Fabric Controller Network Insights For Data Center Ucs Central Software Unified Communications Manager Im Presence Service Unified Computing System Unified Contact Center Management Portal Video Surveillance Manager Snow Commander Vm Access Proxy Synchro Synchro 4D Rhythmyx Xcode

10.0

CVSS 3.1 · NVD

Severity by source

NVD PRIMARY

10.0 CRITICAL

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Attack Vector

Network

Attack Complexity

Low

Privileges Required

None

User Interaction

None

Scope

Changed

Confidentiality

High

Integrity

High

Availability

High

Lifecycle Timeline

Analysis Generated

Mar 26, 2026 - 11:19 vuln.today

Added to CISA KEV

Feb 20, 2026 - 16:15 cisa

CISA KEV

PoC Detected

Feb 20, 2026 - 16:15 vuln.today

Public exploit code

Patch released

Feb 20, 2026 - 16:15 nvd

Patch available

CVE Published

Dec 10, 2021 - 10:15 nvd

CRITICAL 10.0

Blast Radius

ecosystem impact

† from your stack dependencies † transitive graph · vuln.today resolves 4-path depth

6 maven packages depend on com.guicedee.services:log4j-core (1 direct, 5 indirect)
598 maven packages depend on org.apache.logging.log4j:log4j-core (254 direct, 347 indirect)

Ecosystem-wide dependent count for version 1.2.1.2-jre17 and other introduced versions.

DescriptionNVD

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

AnalysisAI

Apache Log4j2 contains a critical JNDI injection vulnerability known as 'Log4Shell' that allows unauthenticated remote code execution through crafted log messages, affecting virtually every Java application on Earth and triggering the largest vulnerability remediation effort in history.

Technical ContextAI

The CWE-20 vulnerability in Log4j2's lookup feature automatically processes JNDI references in log messages. When an application logs user-controlled data containing ${jndi:ldap://...}, Log4j resolves the JNDI reference, connecting to an attacker's LDAP server which returns a malicious Java class for execution. The attack surface includes HTTP headers, form fields, usernames, and any other data that reaches a log statement.

RemediationAI

Update Log4j2 to 2.17.1+. If immediate patching is impossible: set log4j2.formatMsgNoLookups=true, remove JndiLookup class from classpath, or upgrade to Java 8u191+ (partial mitigation). Scan all Java applications for Log4j2 usage. This requires organization-wide inventory of all Java deployments.