Pilz Hardware And Software Not Affected By “Log4Shell” Vulnerability In Software Library Log4j

DCS PILZ Log4Shell Vulnerability 1 400

December 17, 2021

 

Dear Madam or Sir,

 

On December 10th, 2021, the BSI (the German Federal Office for Information Security) published a cyber security alert on the so-called “Log4Shell” vulnerability in the software library Log4j. Log4j is used in many Java applications.

From the BSI alert:

“An IT security vendor blog [LUN2021] reports on vulnerability CVE-2021-44228 [MIT2021] in log4j versions 2.0 through 2.14.1, which may allow attackers to execute their own program code on the target system and thus compromise the server.”

 

Further information is available at:

 

Pilz’s analysis revealed the following:

  • ••Pilz hardware components do not use Java and thus no log4j. Therefore, these components are not affected.
  • ••Pilz Software products partially use log4j versions 2.0 to 2.14.1 (current vulnerability CVE-2021-44228). Analyses to date have shown that it is highly unlikely that the vulnerability can be exploited. If, contrary to expectations, there is a risk, we will publish a security advisory.
  • ••In some Pilz Software products, log4j version 1.2.x is used. The exploitation of the vulnerability in this version (CVE 2021-4104) requires, among other things, a specific configuration. However, this configuration is not used in Pilz Software products.

 

We hope this information is helpful to you. If you have any further questions, please contact our technical support:support@pilz.com.

With best regards

Pilz GmbH & Co. KG

 

Source

 

Related Articles

Clamping module minimizes set-up times in 3D printing

Clamping module minimizes set-up times in 3D printing

The completely sealed quick-change pallet system SCHUNK VERO-S NSE-AM mini 78-20 promises short set-up times and high productivity in three-dimensional printing and was particularly designed for the use in additive manufacturing. The module transfers the idea, which has proven for many years in the metal-cutting process of setting up machines for laser sintering (SLS) and laser melting (SLM) within seconds.

 

 

 

| |

Ontario Investing in Hydrogen to Fuel Province’s Growing Economy

Innovative projects will explore opportunities to expand the use of hydrogen as a clean alternative fuel October 12, 2023 The Ontario government announced the first six projects that will receive funding through the new Hydrogen Innovation Fund, which will kickstart and develop opportunities for low-carbon hydrogen to serve as a clean fuel while strengthening the…

DCS WEG Supplies Products to Worlds Largest Desalination Plant 1 400

WEG Supplies Products To the World´s Largest Desalination Plant

 

On March 31, the world’s largest seawater desalination plant, Rabigh 3, was installed in Saudi Arabia, and WEG has participated as a supplier of electric motors and frequency drives. The success of the project was honored and recognized by Guinness World Records as “the world’s largest reverse osmosis desalination plant.” Counting on technical expertise of dealing with large engineering companies, WEG took part of this impressive project as a supplier of motors and frequency drives for the main processes of the water production chain, ranging from capture, pre-treatment, reverse osmosis process to post-treatment.

 

|

Ontario Helping More Students Enter the Skilled Trades Faster

Grade 11 students can soon apprentice full-time and still earn their high-school diploma March 8, 2023 The Ontario government is preparing young people for in-demand and well-paying careers by allowing students in grade 11 to transition to a full-time, skilled trades apprenticeship program. Upon receiving their Certificate of Apprenticeship, these young workers can apply for…

| | |

Ontario Refurbishing Hydroelectric Station in Cornwall

May 22, 2024 R.H. Saunders Generating Station will supply reliable, affordable and clean power for decades to come The Ontario government is supporting Ontario Power Generation’s (OPG) plan to refurbish its R.H. Saunders Generating Station in Cornwall, the second largest hydroelectric station in Ontario. This infrastructure program would invest more than $600 million to secure…

Editor’s Pick: Featured Article

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s scalable engineering software, u-control 2000, adapts individually to your requirements. And, the u-control is powerful, compact and fully compatible with Weidmüller’s I/O system u-remote. This article looks at what makes u-control the heart of your automation.

Programmable logic controllers (PLCs) are one of the main components of any automated system. A typical control system has inputs, outputs, controllers (i.e., PLCs), and some type of human interaction with the system, a human machine interface (HMI), for example.

Read More

Latest Articles

  • The Future of Barcodes: Understanding the 2027 Digital Transformation

    January 17, 2025 In the world of industrial automation and manufacturing, a significant change is on the horizon. The familiar UPC barcode – a staple of product identification for nearly five decades – is evolving into a more sophisticated system. This transformation, known as “Sunrise 2027,” will revolutionize how businesses handle product identification, tracking, and… Read More…

  • High-Performance Drives for the Food Industry

    January 15, 2025 Food production is subject to the strictest of requirements. Operations in this highly sensitive hygienic environment must run smoothly to manufacture the large volume and diverse range of products efficiently and sustainably. What does this mean for companies that are active on a market characterized by fierce competition and high consumer expectations?… Read More…