cve-2021-44228 log4j RCE - are Zyxel USG or ATP products vulnerable?

ChipConnJohn · December 2021

Hi all,

I'm not seeing any information on whether these devices are vulnerable. Anyone see a release from Zyxel?

OTADMIN · December 2021

Also looking for some information to secure our network.
We don't have much facing the internet. Only our firewall, so i would like to know if it's vulnerable.
If not, that would be great ofcourse. But a some information would be nice

Mijzelf · December 2021

As Log4j is a Java application, and I can't imagine there is a Java virtual machine included in these embedded boxes, I don't think they are affected.

Zyxel_Vic · December 2021

Hi @OTADMIN
Thank you for sharing this information with us. We had aware this vulnerability announcement and we're now studying on it. We will put our findings on the Zyxel security advisories and update to you once we finished the researching.