Pilz Hardware And Software Not Affected By “Log4Shell” Vulnerability In Software Library Log4j

DCS PILZ Log4Shell Vulnerability 1 400

December 17, 2021

 

Dear Madam or Sir,

 

On December 10th, 2021, the BSI (the German Federal Office for Information Security) published a cyber security alert on the so-called “Log4Shell” vulnerability in the software library Log4j. Log4j is used in many Java applications.

From the BSI alert:

“An IT security vendor blog [LUN2021] reports on vulnerability CVE-2021-44228 [MIT2021] in log4j versions 2.0 through 2.14.1, which may allow attackers to execute their own program code on the target system and thus compromise the server.”

 

Further information is available at:

 

Pilz’s analysis revealed the following:

  • ••Pilz hardware components do not use Java and thus no log4j. Therefore, these components are not affected.
  • ••Pilz Software products partially use log4j versions 2.0 to 2.14.1 (current vulnerability CVE-2021-44228). Analyses to date have shown that it is highly unlikely that the vulnerability can be exploited. If, contrary to expectations, there is a risk, we will publish a security advisory.
  • ••In some Pilz Software products, log4j version 1.2.x is used. The exploitation of the vulnerability in this version (CVE 2021-4104) requires, among other things, a specific configuration. However, this configuration is not used in Pilz Software products.

 

We hope this information is helpful to you. If you have any further questions, please contact our technical support:support@pilz.com.

With best regards

Pilz GmbH & Co. KG

 

Source

 

Related Articles

DCS ABB Motion Capital Market Day 1 400

ABB Motion Capital Markets Day: Energy Transition Driving Profitable Growth

 

ABB’s Motion business area recently hosted Capital Markets Day in Helsinki, Finland. A world leader in electric motors and drives, ABB Motion outlined its ambition to outgrow the motion market and to improve its industry leading performance further.  Accelerating the adoption of the most energy efficient motors and drives – in industry, cities, and transportation – will drive significant energy savings around the world and help us get closer to the 1.5 degree2 target.

 

| | | |

Asahi Kasei to Construct a Lithium-ion Battery Separator Plant in Canada

May 10, 2024 Asahi Kasei has announced that it will construct an integrated plant in Ontario, Canada for the base film manufacturing and coating of Hipore™ wet-process lithium-ion battery (LIB) separator1. In relation to this plant, Asahi Kasei has concluded a basic agreement with Honda Motor Co., Ltd. (Honda) and the two parties are currently…

Machinery Directive (MD) / Machinery Regulation (MR)
| | |

Machinery Directive (MD) / Machinery Regulation (MR)

July 10, 2023 The Machinery Directive is one of the most important pieces of legislation for harmonizing the essential safety requirements for machinery within the European Union. It describes standardized health and safety requirements for interaction between human and machine. The Directive promotes the free movement of machinery within the single market and guarantees a high level…

Ontario Promotes Key Sectors During Trade Mission to New York City

April 17, 2023 Province highlights world-class workforce in meetings with U.S. companies The Ontario government has concluded a successful business mission to New York City to promote the province’s financial services, information technology and life sciences sectors, and explore new opportunities for investment and job creation. The mission, led by Vic Fedeli, Minister of Economic…

DCS Yaskawa HV600 Drives Application Training 1 400

Yaskawa- HV600 Drives Application Programming – Live Online

 

The HV600 Drive Application Programming class is designed for technicians and engineers that need to know how to incorporate an HV600 Drive into an application. Students will learn to adjust parameters in the drive using both the keypad and DriveWizardHVAC to perform function demonstrations. Basic and advanced drive parameters will be discussed as well as drive monitors. A variety of hands on exercises in class will help the student thoroughly learn what the parameters functions do and how to set them up.

 

Editor’s Pick: Featured Article

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s scalable engineering software, u-control 2000, adapts individually to your requirements. And, the u-control is powerful, compact and fully compatible with Weidmüller’s I/O system u-remote. This article looks at what makes u-control the heart of your automation.

Programmable logic controllers (PLCs) are one of the main components of any automated system. A typical control system has inputs, outputs, controllers (i.e., PLCs), and some type of human interaction with the system, a human machine interface (HMI), for example.

Read More

Latest Articles