Cisco WLAN Controller 5520 and CVE-2021-44228

[gcofone]

Can a statement regarding the cisco wlc 5520 and CVE-2021-44228 already be done?

Is WLC 5520 also affected by CVE-2021-44228?

Does anybody know some more specific details about the circumstances?

Regards, Giovanni

[gcofone]

Sorry I missed to mention that I'm running Version 8.5.182.0

[Leo Laohoo · Accepted solution]

The list of affected products can be found here:  Vulnerability in Apache Log4j Library Affecting Cisco Products

AireOS is not in either list of "Under Investigation" or "Vulnerable Products", however, Cheetah OS-based AP are being investigated.

[gcofone]

Ji Leo, thanks a lot for Your quick reply.

[ibraham ajazz]

• Cisco AireOS Wireless LAN Controllers not affected
• https://tools.cisco.com/security/center/content/CiscoSecurityAdvisory/cisco-sa-apache-log4j-qRuKNEbd