Home / Vulnerabilities / CVE-2021-44228
CRITICAL SEVERITY Ransomware Linked
CVE-2021-44228 Apache · Log4j2

Apache Log4j2 Remote Code Execution Vulnerability

Critical Threat Advisory: This vulnerability is documented in active Ransomware campaigns. Immediate remediation required.

Technical Severity

CVSS v3.1 Metrics

CRITICAL
10 / 10
Minimal Risk Critical
Vector Specification
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H
Exploitation Likelihood

EPSS Prediction

94.36 %
Predictive Probability
Percentile Rank
100.0 th

Documented as more likely to be exploited than 100.0% of known CVEs.

Detection Date

Dec 10, 2021

Remediation Due

Dec 24, 2021

CISA Catalog Active

Threat Analysis

Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.

Remediation Directive

For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

External Intelligence

NVD

National Vulnerability Database

https://nvd.nist.gov/vuln/detail/CVE-2021-44228