Sunday Siemens’ Advisories for Log4Shell Vulnerabilities

12-19-21

Today (yes, on Sunday less than a week after 2nd Tuesday, talk about out-of-zone), Siemens published a new log4j advisory and updated their earlier Log4Shell advisory (for the fifth time).

New Advisory

Siemens published an advisory discussing the latest log4j vulnerability (CVE-2021-45105). This new vulnerability is not nearly as bad as Log4Shell  (7.5 ba…