We are aware of the Apache Log4j critical vulnerability (CVE-2021-44228) and have taken swift action with an intensive security audit to evaluate our systems against the vulnerability and have implemented security updates. We have not discovered any evidence of compromise.

Due to the pervasiveness of the vulnerability, we are taking a detailed and comprehensive approach, where we will continue to evaluate our partners, monitor our systems and deploy security measures to address any potentially vulnerable systems.

Logitech takes the security and safety of our systems, products and customers' data very seriously. We will continue to closely monitor the environment.

For more information on the vulnerability:
Official advisory alert: https://logging.apache.org/log4j/2.x/security.html
CVE: https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2021-44228

Attachments

  • Original Link
  • Original Document
  • Permalink

Disclaimer

Logitech International SA published this content on 14 December 2021 and is solely responsible for the information contained therein. Distributed by Public, unedited and unaltered, on 15 December 2021 00:58:01 UTC.