cve-2021-44228 log4j RCE - are Zyxel USG or ATP products vulnerable?

Options
ChipConnJohn
ChipConnJohn Posts: 45 image  Freshman Member
Zyxel Certified Network Administrator - Security Zyxel Certified Network Administrator - Nebula First Comment Fifth Anniversary
in Security
Hi all,

I'm not seeing any information on whether these devices are vulnerable.  Anyone see a release from Zyxel?

All Replies

  • OTADMIN
    OTADMIN Posts: 15 image  Freshman Member
    First Comment Friend Collector Fourth Anniversary
    Options
    Also looking for some information to secure our network.
    We don't have much facing the internet. Only our firewall, so i would like to know if it's vulnerable.
    If not, that would be great ofcourse. But a some information would be nice

  • Mijzelf
    Mijzelf Posts: 3,063 image  Guru Member
    250 Answers 2500 Comments Friend Collector Eighth Anniversary
    Options
    As Log4j is a Java application, and I can't imagine there is a Java virtual machine included in these embedded boxes, I don't think they are affected.
  • Zyxel_Vic
    Zyxel_Vic Posts: 323 image  Zyxel Employee
    25 Answers First Comment Friend Collector Eighth Anniversary
    Options
    Hi @OTADMIN
    Thank you for sharing this information with us. We had aware this vulnerability announcement and we're now studying on it. We will put our findings on the Zyxel security advisories and update to you once we finished the researching.
  • C10B
    C10B Posts: 6 image  Freshman Member
    First Comment Fifth Anniversary
    Options
    It would be great if those advisories had dates listed. Should we just look at the top of the list in case anything about log4shell is added?
  • Mario
    Mario Posts: 111 image  Ally Member
    Zyxel Certified Network Engineer Level 1 - Security First Comment Friend Collector Seventh Anniversary
    Options
    DLDR; NOT affected

    see the SA:





  • [Deleted User]
    [Deleted User] Posts: 3 image  Freshman Member
    Third Anniversary
    Options
    Hi, what does "ZLD" Firmware mean?
  • USG_User
    USG_User Posts: 400 image  Master Member
    5 Answers First Comment Friend Collector Seventh Anniversary
    Options
    For USG firewalls (our device is USG110) ZLD means the normal firmware, current is v4.70 (AAPH.0)
  • [Deleted User]
    [Deleted User] Posts: 3 image  Freshman Member
    Third Anniversary
    Options
    Thank you very much.

Categories

Security Help Center

EnglishTiếng ViệtРусскийไทย中文（台灣）