Ricoh understands the importance of security and is committed to managing its products and services with the most advanced security technologies possible for its customers worldwide.

Ricoh is aware of the reported Apache Log4j remote code execution vulnerability (CVE-2021-44228). Apache Log4j is an open-source logging JAVA-based library offered by Apache Software Foundation. Ricoh is currently investigating if any Ricoh products and services may be potentially impacted by this vulnerability.

Servers operating with Apache Log4j are potentially threatened, allowing a third party to remotely access the server and execute remote code by sending modified data to exploit this vulnerability.

https://logging.apache.org/log4j/2.x/security.html

Ricoh is committed to supporting customers across the globe, enabling them to operate Ricoh products equipped with the latest security settings. Updates on impacted Ricoh products and services and related countermeasures will be provided promptly on this page as they become available.

Attachments

  • Original Link
  • Original Document
  • Permalink

Disclaimer

Ricoh Company Ltd. published this content on 15 December 2021 and is solely responsible for the information contained therein. Distributed by Public, unedited and unaltered, on 15 December 2021 07:08:05 UTC.