Struxureware and log4j/log4shell

[mkbbmc]

Good afternoon,

  Does SE/APC have a statement or mitigation page related to Struxureware DCE and the log4shell vulnerability?  Obviously we want to mitigate if necessary and if not I'd also like to provide the higher ups with some peace of mind that this system is clear.

Thanks!

[Shaun]

Hi @mkbbmc,

At this time we don't believe the version of log4j used in DCE is affected.

I can't promise this is the final word, I would recommend keeping an eye on (or subscribing to) https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp