Article Number: 000194414
Print
Dell Response to Apache Log4j Remote Code Execution
Vulnerability
Summary: On December 10, 2021, a critical remote code vulnerability was published concerning the Apache Log4j
library. Dell is in the process of assessing potential impact to its products.
Audience Level: Customer
Article Content
Security Article Type
Security KB
CVE Identifier
CVE-2021-44228
Issue Summary
Apache Publication:Apache Log4j Remote Code Execution
CVE Details:CVE-2021-44228
Details
Dell is reviewing the recently publishedApache Log4j Remote Code Executionvulnerability being tracked
inCVE-2021-44228andassessingimpacton our products.The security of our products is a top priority and critical to protecting our
customers.
VulnerableProducts
The following products areconfirmedasimpactedbytheApacheLog4jvulnerability:
Product Mitigation/Workaround Security UpdateRelease Timeline
APEX Console Cloud environment patch in progress
APEX Data Storage Services Cloud environment patch in progress
Cloud IQ Cloud environment patch in progress
Connectrix (Cisco MDS DCNM) TBD
ConnectrixB-SeriesSANnav See
DSA-2021-266
Data Domain OS Workaround expected 12/15
Dell EMC Avamar See DSA-2021-277
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
1 of 7
12/15/2021, 8:31 AM
Dell EMC Cloud Disaster Recovery Workaround expected 12/15
Dell EMC Data Protection Central TBD
Dell EMC Data Protection Search TBD
Dell EMC ECS Patch expected 12/17
Enterprise Hybrid Cloud See
DSA-2021-270
Dell EMC Enterprise Storage Analytics forvRealizeOperations See DSA-2021-278
Dell EMC Integrated System for Microsoft Azure Stack Hub TBD
Dell EMCNetWorker Workaround expected 12/15
Dell EMCNetWorker VE TBD
Dell EMCPowerFlexAppliance Workaround expected 12/15
Dell EMC PowerFlex Manager TBD
Dell EMCPowerFlexRack TBD
Dell EMCPowerProtectData Manager Workaround expected 12/15
Dell EMCPowerProtectDP Series Appliance (iDPA) Workaround expected 12/15
Dell EMCPowerStore Patch expected 12/31
Dell EMCRecoverPoint TBD
Dell EMC SRMvApp TBD
Dell EMC Streaming Data Platform TBD
Dell EMC Unity Patch expected 12/31
Dell EMCVplex TBD
Dell EMCVxRail See
DSA-2021-265
Dell Open Management Enterprise - Modular Patch expected 12/17
DellEMCOpenManageEnterprise Services Patch expected 12/17
OpenManageEnterprise Patch expected 12/17
Dell EMC Ruckus SmartZone 300 Controller TBD
Dell EMC Ruckus SmartZone 100 Controller
TBD
Dell EMC Ruckus Virtual Software
TBD
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
2 of 7
12/15/2021, 8:31 AM
Secure Connect Gateway (SCG) 5.0 Appliance TBD
SRS Policy Manager TBD
SupportAssistEnterprise TBD
UnisphereCentral TBD
Vblock TBD
VNXe 1600 TBD
VNXe 3200 TBD
VxBlock TBD
VxFlexReady Nodes Workaround expected 12/15
vRealize Data Protection Extension TBD
Wyse Management Suite See
DSA-2021-267
Products Confirmed Not Vulnerable
The following products are not impacted by the Apache Log4j vulnerability:
• Alienware Command Center
• Alienware OC Controls
• Alienware On Screen Display
• Alienware Update
• Atmos
• Azure Stack HCI
•
CalMAN Powered Calibration Firmware
• CalMAN Ready for Dell
• Centera
• Chameleon Linux Based Diagnostics
• Chassis Management Controller (CMC)
• China HDD Deluxe
• Cloud Mobility for Dell EMC Storage
• Cloud Tiering Appliance
•
Connectrix (Cisco MDS 9000 switches)
• Connextrix B Series
• CyberSense for PowerProtect Cyber Recovery
• CyberSecIQ Application
• Dell BSAFE Crypto-C Micro Edition
• Dell BSAFE Crypto-J
• Dell BSAFE Micro Edition Suite
• Dell Calibration Assistant
• Dell Cinema Color
• Dell Cloud Command Repository Manager
• Dell Cloud Management Agent
• Dell Color Management
• Dell Command Configure
• Dell Command Integration Suite for System Center
• Dell Command Intel vPro Out of Band
• Dell Command Monitor
• Dell Command Power Manager
• Dell Command PowerShell Provider
• Dell Command Update
• Dell EMC Container Storage Modules
• Dell Customer Connect
• Dell Data Guardian
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
3 of 7
12/15/2021, 8:31 AM
• Dell Data Protection
• Dell Data Recovery Environment
• Dell Data Vault
• Dell Data Vault for Chrome OS
• Dell Deployment Agent
•
Dell Digital Delivery
•
Dell Direct USB Key
• Dell Display Manager 1.5 for Windows / macOS
• Dell Display Manager 2.0 for Windows / macOS
• Dell EMC AppSync
• Dell EMC Cloudboost
• Dell EMC CloudLink
• Dell EMC Data Computing Appliance (DCA)
• Dell EMC Data Protection Advisor
• Dell EMC DataIQ
•
Dell EMC Disk Library for Mainframe
• Dell EMC GeoDrive
• Dell EMC Isilon InsightIQ
• Dell EMC License Manager
• Dell EMC Networking Onie
• Dell EMC OpenManage Ansible Modules
• Dell EMC OpenManage integration for Splunk
• Dell EMC OpenManage Integration for VMware vCenter
• Dell EMC OpenManage Management pack for vRealize Operations
• Dell EMC OpenManage Operations Connector for Micro Focus Operations Bridge Manager
• Dell EMC PowerMax and in market VMAX
• Dell EMC PowerPath
•
• Dell EMC PowerProtect Cyber Recovery
• Dell EMC PowerScale OneFS
• Dell EMC PowerShell for PowerMax
• Dell EMC PowerShell for Powerstore
•
Dell EMC PowerShell for Unity
• Dell EMC PowerSwitch Z9264F-ON BMC, Dell EMC PowerSwitch Z9432F-ON BMC
• Dell EMC Repository Manager (DRM)
•
Dell EMC SourceOne
• Dell EMC Systems Update (DSU)
• Dell EMC Unisphere 360
• Dell EMC Virtual Storage Integrator
• Dell EMC XtremIO
• Dell Encryption Personal
• Dell Encryption Enterprise
•
Dell Security Management Server and Dell Security Management Server Virtual
• Dell Endpoint Security Suite Enterprise
• Dell Hybrid Client
• Dell ImageAssist
•
Dell Insights Client
• Dell Linux Assistant
• Dell Mobile Connect
• Dell Monitor ISP (Windows/Mac/Linux)
• Dell Monitor SDK
• Dell Networking X-Series
• Dell Open Manage Mobile
• Dell Open Manage Server Administrator
• Dell OpenManage Change Management
• Dell OpenManage Enterprise Power Manager Plugin
• Dell Optimizer
• Dell OS Recovery Tool
• Dell Peripheral Manager 1.4 / 1.5 for Windows
• Dell Platform Service
• Dell Power Manager
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
4 of 7
12/15/2021, 8:31 AM
• Dell Power Manager Lite
•
Dell Precision Optimizer
• Dell Precision Optimizer for Linux
• Dell Premier Color
• Dell Recovery (Linux)
• Dell Remediation Platform
• Dell Remote Execution Engine (DRONE)
• Dell Security Advisory Update - DSA-2021-088
• Dell SupportAssist SOS
• Dell Thin OS
• Dell Threat Defense
• Dell True Color
• Dell Trusted Device
• Dell Update
• Dream Catcher
• DUP Creation Service
• DUP Framework (ISG)
• Embedded NAS
• Embedded Service Enabler
• Fluid FS
• "iDRAC Service Module (iSM) "
• Infinity MLK (firmware)
• Integrated Dell Remote Access Controller (iDRAC)
• ISG Accelerators
• ISG Board & Electrical
• IsilonSD Management Server
• IVE-WinDiag
• Mainframe Enablers
• My Dell
• MyDell Mobile
• NetWorker Management Console
• Networking BIOS
• Networking DIAG
• Networking N-Series
• Networking OS 10
• Networking OS9
• Networking SD-WAN Edge SD-WAN
• Networking W-Series
• Networking X-Series
• OMIMSSC (OpenManage Integration for Microsoft System Center)
• OMIMSSC (OpenManage Integration for Microsoft System Center)
• OMNIA
• OMNIA
• OpenManage Connections - Nagios
• OpenManage Connections - ServiceNow
•
OpenManage Integration for Microsoft System Center for System Center Operations Manager
•
OpenManage Integration with Microsoft Windows Admin Center
• OpenManage Network Integration
• PowerConnect N3200
• PowerConnect PC2800
• PowerConnect PC8100
• PowerEdge BIOS
• PowerEdge Operating Systems
• PowerTools Agent
•
PPDM Kubernetes cProxy
• PPDM VMware vProxy
• Redtail
• Remotely Anywhere
• Riptide (firmware)
• Rugged Control Center (RCC)
• SD ROM Utility
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
5 of 7
12/15/2021, 8:31 AM
• SDNAS
• "Server Storage "
• Smart Fabric Storage Software
• SmartByte
•
SMI-S
• Software RAID
•
Solutions Enabler
• Solutions Enabler vApp
•
Sonic
• SRS VE
•
Storage Center
• SupportAssist Client Commercial
• SupportAssist Client Consumer
• UCC Edge
• Unisphere for PowerMax
• Unisphere for PowerMax vApp
• Update Manager Plugin
•
ViPR Controller
• VNX Control Station
• VNX1
• VNX2
• Vsan Ready Nodes
• Warnado MLK (firmware)
• Wyse Proprietary OS (ThinOS)
• Wyse Windows Embedded Suite

Products Under Review
• Dell Client Platforms (Latitude, OptiPlex, Alienware, Inspiron, Precision, XPS, Vostro, ChengMing) BIOS
• Bare Metal Orchestrator
• Equallogic PS
• ISG Comms
• ISG Drive & Storage Media
•
ISG Memory
• Networking SD-WAN Edge VEP Edge
Any security updates or mitigations will be communicated athttps://www.dell.com/support/securityassoon astheybecome
available.You can subscribe to our Security Alerts to be notified when these Security Advisories are posted by following the
guidancehere,or by following the directions in the Security Alerts section on theSecurity Advisories and Notices page.
Recommendations
Customers are encouraged to follow security best practicesincluding those recommended by Apache (
Apache Log4j Remote Code
Execution)andcontinue to monitor this notice for further updates as they become available.
Legal Information
The information should be read and used to assist in avoiding situations that may arise from the problems described herein. Dell
Technologies distributes Security Advisories, Security Notices and Informational articles to bring important security information to
the attention of users of the affected product(s). Dell Technologies assesses the risk based on an average of risks across a diverse
set of installed systems and may not represent the actual risk to your local installation and individual environment. It is
recommended that all users determine the applicability of this information to their individual environments and take appropriate
actions. The information set forth herein is provided "as is" without warranty of any kind. Dell Technologies expressly disclaims all
warranties, either express or implied, including the warranties of merchantability, fitness for a particular purpose, title and non-
infringement. In no event shall Dell Technologies, its affiliates or suppliers, be liable for any damages whatsoever arising from or
related to the information contained herein or actions that you decide to take based thereon, including any direct, indirect, incidental,
consequential, loss of business profits or special damages, even if Dell Technologies, its affiliates or suppliers have been advised of
the possibility of such damages. Some states do not allow the exclusion or limitation of liability for consequential or incidental
damages, so the foregoing limitation shall apply to the extent permissible under law.
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
6 of 7
12/15/2021, 8:31 AM
Article Properties
Affected Product
Product Security Information
Last Published Date
15 Dec 2021
Version
44
Article Type
Security KB
Dell Response to Apache Log4j Remote Code Execution Vulnerability | Dell US
https://www.dell.com/support/kbdoc/en-us/printview/000194414/30/en
7 of 7
12/15/2021, 8:31 AM