VulnSocial

CVE-2021-45046General(apache / 6bk1602-0aa12-0tp0)

LOWCVSS 9.0 · CRITICALCISA KEV

Signal is active with 1 mentions in latest observed window

Immediate actions

  • Track advisory updates for patch or workaround availability

Recommended action window: Monitor and triage in normal cycle

NVD description

It was found that the fix to address CVE-2021-44228 in Apache Log4j 2.15.0 was incomplete in certain non-default configurations. This could allows attackers with control over Thread Context Map (MDC) input data when the logging configuration uses a non-default Pattern Layout with either a Context Lookup (for example, $${ctx:loginId}) or a Thread Context Map pattern (%X, %mdc, or %MDC) to craft malicious input data using a JNDI Lookup pattern resulting in an information leak and remote code execution in some environments and local code execution in all environments. Log4j 2.16.0 (Java 8) and 2.12.2 (Java 7) fix this issue by removing support for message lookup patterns and disabling JNDI functionality by default.

apache CVEsBack to dashboard
1.0/ 10 priority

Sources & remediation

Listed in the CISA Known Exploited Vulnerabilities catalog. Federal remediation due date: 2023-05-22. Apply updates per vendor instructions.

Patch / fix
Vendor / third-party advisories
Other references
Weakness type (CWE)
CWE-917

Priority

LOW

Exploitation

ACTIVE

PoC

NONE

Patch

AVAILABLE

Momentum

STABLE

Are you affected?

If you run products in this scope, you should treat this CVE as relevant to your environment.

  • 6bk1602-0aa12-0tp0
  • 6bk1602-0aa12-0tp0_firmware
  • 6bk1602-0aa22-0tp0
  • 6bk1602-0aa22-0tp0_firmware

Threat summary

  • 2 mentions across 2 observed days
  • Momentum state: stable

What's happening

  • Technical details provided in 1 signal
  • General: 2 classified signals
  • Peaked 1d ago at 1 mentions (2026-06-09); latest day: 1
  • 2 total mentions across 2 days

Affected systems

Vendors
apachecvatdebianfedoraprojectintelsiemenssonicwall
Products
6bk1602-0aa12-0tp06bk1602-0aa12-0tp0_firmware6bk1602-0aa22-0tp06bk1602-0aa22-0tp0_firmware6bk1602-0aa32-0tp06bk1602-0aa32-0tp0_firmware6bk1602-0aa42-0tp06bk1602-0aa42-0tp0_firmware6bk1602-0aa52-0tp06bk1602-0aa52-0tp0_firmware

28 versions affected across 61 products

Deep dive

Activity timeline2 mentions / 2d
00111Mentions · 2026-06-09: 1Mentions · 2026-08-27: 1Technical Details · 2026-08-27: 106-0908-27
Signal classification1 categories
General
2100.0%
Referenced assets1 URL
Full discourse2 posts
  • SAFEGUARDIAN@safeguardian_io
    General

    Caveat, because it's load-bearing: this is for a non-default PatternLayout carrying a Thread Context Lookup ($${ctx:loginId}), the config CVE-2021-45046 names. Under the stock %m%n pattern the answer differs. Different config, different case.

    Post summary

    The excerpt references CVE-2021-45046, noting its relevance to a non‑default PatternLayout with a Thread Context Lookup, but contains no evidence of active exploitation, PoC, or mitigation guidance.

    1000034
    74 followersView on X
  • Lil’ Diablo Sauce: Congressional Jobs Edition（╹◡╹）@Nick_Barnes
    General

    Log4Shell Log4j Vulnerability Test | CVE-2021-45046 Detection | Qualys https://blog.qualys.com/vulnerabilities-threat-research/2021/12/15/is-your-web-application-exploitable-by-log4shell-cve-2021-44228-vulnerability

    Post summary

    Qualys posts a blog entry titled "Log4Shell Log4j Vulnerability Test | CVE-2021-45046 Detection" but provides no PoC, exploit code, patch information, or detailed technical analysis.

    0000021
    2.2K followersView on X
CPE platform detail95 entries

95 of 95 entries

PartVendorProductVersionTarget SWTarget HW
Appapachelog4j---
Appapachelog4j2.0--
Appapachelog4j2.0--
Appapachelog4j2.0--
Appapachelog4j2.0--
Appcvatcomputer_vision_annotation_tool---
OSdebiandebian_linux10.0--
OSdebiandebian_linux11.0--
OSfedoraprojectfedora34--
OSfedoraprojectfedora35--
Appintelaudio_development_kit---
Appinteldatacenter_manager---
Appintelgenomics_kernel_library---
Appinteloneapi-eclipse-
Appintelsecure_device_onboard---
Appintelsensor_solution_firmware_development_kit---
Appintelsystem_debugger---
Appintelsystem_studio---
HWsiemens6bk1602-0aa12-0tp0---
OSsiemens6bk1602-0aa12-0tp0_firmware---
HWsiemens6bk1602-0aa22-0tp0---
OSsiemens6bk1602-0aa22-0tp0_firmware---
HWsiemens6bk1602-0aa32-0tp0---
OSsiemens6bk1602-0aa32-0tp0_firmware---
HWsiemens6bk1602-0aa42-0tp0---
OSsiemens6bk1602-0aa42-0tp0_firmware---
HWsiemens6bk1602-0aa52-0tp0---
OSsiemens6bk1602-0aa52-0tp0_firmware---
Appsiemenscaptial---
Appsiemenscaptial2019.1--
Appsiemenscaptial2019.1--
Appsiemenscomos---
Appsiemensdesigo_cc_advanced_reports4.0--
Appsiemensdesigo_cc_advanced_reports4.1--
Appsiemensdesigo_cc_advanced_reports4.2--
Appsiemensdesigo_cc_advanced_reports5.0--
Appsiemensdesigo_cc_advanced_reports5.1--
Appsiemensdesigo_cc_info_center5.0--
Appsiemensdesigo_cc_info_center5.1--
Appsiemense-car_operation_center---
Appsiemensenergy_engage3.1--
Appsiemensenergyip8.5--
Appsiemensenergyip8.6--
Appsiemensenergyip8.7--
Appsiemensenergyip9.0--
Appsiemensenergyip_prepay3.7--
Appsiemensenergyip_prepay3.8--
Appsiemensgma-manager---
Appsiemenshead-end_system_universal_device_integration_system---
Appsiemensindustrial_edge_management---
Appsiemensindustrial_edge_management_hub---
Appsiemenslogo\!_soft_comfort---
Appsiemensmendix---
Appsiemensmindsphere---
Appsiemensnavigator---
Appsiemensnx---
Appsiemensopcenter_intelligence---
Appsiemensoperation_scheduler---
Appsiemenssentron_powermanager4.1--
Appsiemenssentron_powermanager4.2--
Appsiemenssiguard_dsa4.2--
Appsiemenssiguard_dsa4.3--
Appsiemenssiguard_dsa4.4--
Appsiemenssipass_integrated2.80--
Appsiemenssipass_integrated2.85--
Appsiemenssiveillance_command---
Appsiemenssiveillance_control_pro---
Appsiemenssiveillance_identity1.5--
Appsiemenssiveillance_identity1.6--
Appsiemenssiveillance_vantage---
Appsiemenssiveillance_viewpoint---
Appsiemenssolid_edge_cam_pro---
Appsiemenssolid_edge_harness_design---
Appsiemenssolid_edge_harness_design2020--
Appsiemenssolid_edge_harness_design2020--
Appsiemenssolid_edge_harness_design2020--
Appsiemensspectrum_power_4---
Appsiemensspectrum_power_44.70--
Appsiemensspectrum_power_44.70--
Appsiemensspectrum_power_44.70--
Appsiemensspectrum_power_7---
Appsiemensspectrum_power_72.30--
Appsiemensspectrum_power_72.30--
Appsiemensspectrum_power_72.30--
HWsiemenssppa-t3000_ses3000---
OSsiemenssppa-t3000_ses3000_firmware---
Appsiemensteamcenter---
Appsiemenstracealertserverplus---
Appsiemensvesys---
Appsiemensvesys2019.1--
Appsiemensvesys2019.1--
Appsiemensvesys2019.1--
Appsiemensxpedition_enterprise---
Appsiemensxpedition_package_integrator---
Appsonicwallemail_security---

Explore more

Back to dashboardapache CVEscvat CVEsdebian CVEs6bk1602-0aa12-0tp0 vulnerabilities