Is Nodegrid OS or ZPE Cloud affected by Apache Log4j vulnerabilities?

Is Nodegrid OS or ZPE Cloud affected by Apache Log4j vulnerabilities?

CVE-2021-44228:
While ZPE Systems has identified Nodegrid versions v4.2.x, v5.0x, v5.2.x to be possibly affected by the CVE-2021-44228, we could not yet confirm that the systems can be exploited. 
Regardless, we released new version to fix such vulnerabilities:
 
December 16, 2021: v4.2.17
December 16, 2021: v5.0.15
December 17, 2021: v5.2.7
 
The Nodegrid v3.2.x and EOL v4.0.x versions are _not_ affected by this vulnerability.
The EOL v4.1.x version is affected, and we recommend to upgrade to v4.2.17, 5.0.15 or 5.2.7. If version is older than 4.1.6, you will need to upgrade to 4.1.6 and then to the latest versions. From 4.1.6 version, you can upgrade directly to the latest versions.

ZPE Cloud is not affected by this CVE.
CVE-2021-4125:
ZPE Software and Cloud are _not_ vulnerable to CVE-2021-4125 (OpenShift Metering Hive container images).
CVE-2021-44832:
ZPE Software and Cloud are _not_ vulnerable to CVE-2021-44832 (Apache Log4j2)

    • Related Articles

    • Troubleshoot: Login in ZPE Cloud

      ZPE Cloud is a powerful platform that enables users to manage their devices and monitor their network with ease. For that, login in ZPE Cloud is essential. In this article, we will explore this issue and other common login issues that users may ...

    • How to: Add Devices to your ZPE Cloud company using Transfer Key

      ZPE Cloud is a powerful tool for managing your Nodegrid devices, and one of the methods to add a device to your company in ZPE Cloud is to use a unique 45-digit Transfer Key, which is a unique identifier assigned to a device or list of devices. ...

    • How to: Add Devices to your ZPE Cloud company using Customer Code and Enrollment key

      ZPE Cloud is a powerful tool for managing your Nodegrid devices, and one of the recommended methods to add devices to your company in ZPE Cloud is to use the Customer Code and Enrollment key. Customer Code is a unique 5-digit identifier assigned to ...

    • How to: Software Upgrade a Nodegrid device using ZPE Cloud

      How to: Update a Nodegrid device using ZPE Cloud ZPE cloud enables managing on-demand and scheduled software updates of your Nodegrid devices. 1. Login to ZPE Cloud 2. Go to Devices :: Enrolled 3. Select the device you want to update and then click ...

    • How to: Restore a backup from ZPE Cloud

      ZPE Cloud enables you to restore a backup of your Nodegrid devices in a few steps. 1. Login to ZPE Cloud 2. Go to Profiles :: Backup 3. Select the backup image and click Restore. You can also download the file to your local computer. 4. Select the ...