Pilz Hardware And Software Not Affected By “Log4Shell” Vulnerability In Software Library Log4j

December 17, 2021

 

Dear Madam or Sir,

 

On December 10th, 2021, the BSI (the German Federal Office for Information Security) published a cyber security alert on the so-called “Log4Shell” vulnerability in the software library Log4j. Log4j is used in many Java applications.

From the BSI alert:

“An IT security vendor blog [LUN2021] reports on vulnerability CVE-2021-44228 [MIT2021] in log4j versions 2.0 through 2.14.1, which may allow attackers to execute their own program code on the target system and thus compromise the server.”

 

Further information is available at:

 

Pilz’s analysis revealed the following:

  • ••Pilz hardware components do not use Java and thus no log4j. Therefore, these components are not affected.
  • ••Pilz Software products partially use log4j versions 2.0 to 2.14.1 (current vulnerability CVE-2021-44228). Analyses to date have shown that it is highly unlikely that the vulnerability can be exploited. If, contrary to expectations, there is a risk, we will publish a security advisory.
  • ••In some Pilz Software products, log4j version 1.2.x is used. The exploitation of the vulnerability in this version (CVE 2021-4104) requires, among other things, a specific configuration. However, this configuration is not used in Pilz Software products.

 

We hope this information is helpful to you. If you have any further questions, please contact our technical support:support@pilz.com.

With best regards

Pilz GmbH & Co. KG

 

Source

 

Related Articles

Editor’s Pick: Featured Article

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s u-control 2000: The Automation Controller

Weidmüller’s scalable engineering software, u-control 2000, adapts individually to your requirements. And, the u-control is powerful, compact and fully compatible with Weidmüller’s I/O system u-remote. This article looks at what makes u-control the heart of your automation.

Programmable logic controllers (PLCs) are one of the main components of any automated system. A typical control system has inputs, outputs, controllers (i.e., PLCs), and some type of human interaction with the system, a human machine interface (HMI), for example.

Read More

Latest Articles

  • How Festo is Building the Next-Gen Workforce Through Technical Education & Skills Competitions

    How Festo is Building the Next-Gen Workforce Through Technical Education & Skills Competitions

    July 31, 2026 By Krystie Johnston Festo is a leader in industrial automation and technical education. For decades, they have sponsored SkillsUSA and WorldSkills mechatronics competitions to align education and industry, supporting the workforce of the future. Festo Didactic (the teaching arm of the Festo Group) has been an active participant and sponsor of SkillsUSA… Read More…

  • Driving the Clean Energy Transition with High-Voltage Power Transformers

    July 23, 2026 Utility-Scale Renewable Energy Project, Jan 2026 Project Overview A global renewable energy leader—operating across Europe, North America, and Latin America—continues to expand its portfolio of utility-scale solar and wind projects to accelerate the net-zero transition. With deep expertise in development, investment, and asset management, the organization focuses on delivering long-term, low-risk clean energy… Read More…