Welcome to the new Schneider Electric Community

It's your place to connect with experts and peers, get continuous support, and share knowledge.

  • Explore the new navigation for even easier access to your community.
  • Bookmark and use our new, easy-to-remember address (community.se.com).
  • Get ready for more content and an improved experience.

Contact SchneiderCommunity.Support@se.com if you have any questions.

Close
Invite a Co-worker
Send a co-worker an invite to the Exchange portal.Just enter their email address and we’ll connect them to register. After joining, they will belong to the same company.
Send Invite Cancel
84488members
353708posts

When is APC / Schneider Electric going to post information about CVE-2021-44228?

APC UPS Data Center & Enterprise Solutions Forum

Schneider Electric support forum for our Data Center and Business Power UPS, UPS Accessories, Software, Services, and associated commercial products designed to share knowledge, installation, and configuration.

Solved
LarryK
Lieutenant JG
Lieutenant JG
4
1514

When is APC / Schneider Electric going to post information about CVE-2021-44228?

Both PowerChute Business Edition and PowerChute Network Shutdown use Java.


Are the existing versions vulnerable?

 

Waited for word on Friday, Saturday, and Sunday - crickets.

 

When is APC by Schneider Electric planning on a response?

Tags (2)

Accepted Solutions
BillP
Administrator Administrator
Administrator
0 Likes
1
1101

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

Tags (1)
BillP
Administrator Administrator
Administrator
0 Likes
0
928

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

Tags (1)
4 Replies 4
SeanD
Cadet
0 Likes
1
1203

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

I too am looking for an official response from APC.

Tags (1)
LarryK
Lieutenant JG
Lieutenant JG
0 Likes
0
1194

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

They updated their security page earlier today, but it is clear we are going to wait quite a while until they get through everything.

 

https://www.se.com/ww/en/work/support/cybersecurity/security-notifications.jsp

 

https://download.schneider-electric.com/files?p_Doc_Ref=SESB-2021-347-01

 

Tags (1)
BillP
Administrator Administrator
Administrator
0 Likes
1
1102

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

Tags (1)
BillP
Administrator Administrator
Administrator
0 Likes
0
929

Re: When is APC / Schneider Electric going to post information about CVE-2021-44228?

For instruction on mitigating these issue with PowerChute see 

 

https://community.exchange.se.com/t5/APC-UPS-Data-Center-Backup/Log4-versions-used-in-Powerchute-vul...

Tags (1)