Pilz Hardware And Software Not Affected By “Log4Shell” Vulnerability In Software Library Log4j

DCS PILZ Log4Shell Vulnerability 1 400

December 17, 2021

 

Dear Madam or Sir,

 

On December 10th, 2021, the BSI (the German Federal Office for Information Security) published a cyber security alert on the so-called “Log4Shell” vulnerability in the software library Log4j. Log4j is used in many Java applications.

From the BSI alert:

“An IT security vendor blog [LUN2021] reports on vulnerability CVE-2021-44228 [MIT2021] in log4j versions 2.0 through 2.14.1, which may allow attackers to execute their own program code on the target system and thus compromise the server.”

 

Further information is available at:

 

Pilz’s analysis revealed the following:

  • ••Pilz hardware components do not use Java and thus no log4j. Therefore, these components are not affected.
  • ••Pilz Software products partially use log4j versions 2.0 to 2.14.1 (current vulnerability CVE-2021-44228). Analyses to date have shown that it is highly unlikely that the vulnerability can be exploited. If, contrary to expectations, there is a risk, we will publish a security advisory.
  • ••In some Pilz Software products, log4j version 1.2.x is used. The exploitation of the vulnerability in this version (CVE 2021-4104) requires, among other things, a specific configuration. However, this configuration is not used in Pilz Software products.

 

We hope this information is helpful to you. If you have any further questions, please contact our technical support:support@pilz.com.

With best regards

Pilz GmbH & Co. KG

 

Source

 

Related Articles

DCS Digi Key to Host Webinar on Single Pair Ethernet 1 400

Digi-Key Electronics to Host Webinar on Single-Pair Ethernet June 8

 

Digi-Key Electronics, which offers some of the world’s largest selection of electronic components in stock for immediate shipment, will host a joint webinar in partnership with SparkFun, Würth Elektronik, HARTING, and Analog Devices on Wednesday, June 8, at 11 a.m. CDT (10 a.m. EST) titled “Remotely Monitor Equipment in a Challenging Environment with Single-Pair Ethernet.”

 

| |

Province Investing $100 Million in Job Training to Protect Ontario Workers

January 27, 2025 Latest Skills Development Fund investment will support workers in the face of tariff threats The Ontario government is stepping up to protect Ontario workers in the face of potential American tariffs on Canadian goods by investing an additional $100 million in the province’s Skills Development Fund (SDF) Training Stream, bringing the total…

| | |

Leviton Acquires PRISM DCS

February 5, 2024 The acquisition of PRISM DCS adds network rack, data and server cabinets to Leviton’s system offering for enterprise and data centre customers Leviton has announced that it acquired PRISM Data Centre Solutions (DCS) Limited, a leading manufacturer of network enclosures. Established in 1996, UK based PRISM DCS provides an unrivalled, service focused…

DCS Safety 0for Press Humna and Robot by PILZ 1 400

Safety for Press, Human and Robot! International Application by PILZ

 

When the Swiss engineering company Peter Huber AG won the order to upgrade and convert the control and safety technology on manual-feed bending machines – to include an additional sheet metal feed via robot – alongside the requirements for economy, flexibility and efficiency there was also one key condition in the requirement specification: wherever possible, the envisaged solution should continue to use the existing controllers.

 

DCS Make Way for a Reliabe Points Controller 1 400x275

Make Way for A Reliable Points Controller – International Application by PILZ

 

The main requirement when retrofitting the points controllers for the urban railway and trams in several of Poland’s major cities was safety and reliability. That’s because the control systems in use were obsolete and sensitive to temperature variations. In many places, points could only be passed at 10 km/h, which prevented attractive, clock-face scheduling. The Polish company ZUE S.A. is an expert in the field of modernizing rail infrastructure and took charge of modernization.

 

PB 26 Allied logo 400

Allied Electronics & Automation Adds Climate Control Solutions From Pinnacle Climate Technologies to Its Growing List of Suppliers

Allied Electronics & Automation continues to expand its roster of more than 500 world-class suppliers in July, adding Pinnacle Climate Technologies and its brands Remington Airetrex, Americ, Schaefer, Master, and Stanley to the portfolio of climate control technologies available at www.alliedelec.com.

 

 

 

Editor’s Pick: Featured Article

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s scalable engineering software, u-control 2000, adapts individually to your requirements. And, the u-control is powerful, compact and fully compatible with Weidmüller’s I/O system u-remote. This article looks at what makes u-control the heart of your automation.

Programmable logic controllers (PLCs) are one of the main components of any automated system. A typical control system has inputs, outputs, controllers (i.e., PLCs), and some type of human interaction with the system, a human machine interface (HMI), for example.

Read More

Latest Articles

  • Why Use Low-Consumption Contactors in Your Motor Control Systems?

    April 15, 2025 By Tiffany Moore Organizations are under more pressure than ever to improve sustainability metrics. How can you help them succeed — and win more business in the process?    Building motor control systems with more sustainable parts is one piece of the puzzle. Control panel builders, system integrators, and design firms have an… Read More…

  • The Long Cable Run Dilemma: Where Should You Install the VFD?

    April 15, 2025 By Damien Herwegh Sophia, a dedicated electrical engineer in a large industrial complex, has been tasked with installing a drive system where the motor is located hundreds of meters away from the control room. Like many engineers before her, she considers the usual question: Should I place the drive in the electrical… Read More…