Vendor Resources

Resource	Link
HOLOGIC Advisory Link	https://www.hologic.com/support/usa/breast-skeletal-products-cybersecurity

Community Resources

Resource	Link
source	https://www.hologic.com/support/usa/breast-skeletal-products-cybersecurity

Community Notes

Source	Note
NCSC-NL	CVE-2021-44228: Investigation
NCSC-NL	While the Hologic software itself does not utilize Java/Log4J, there is a utility program installed that may utilize Java and Log4J. This utility program does not run on startup and is not required for system operation.
CISAGov	While the Hologic software itself does not utilize Java/Log4J, there is a utility program installed that may utilize Java and Log4J. This utility program does not run on startup and is not required for system operation. Please contact Hologic Service for assistance in removing this program.
CISAGov	Last Update: 12/20/2021

Sources

Date	Attribution	Description
2022-01-05 15:51:27	NCSC-NL	Updated vendorInvestigating. Updated community note. Updated community link source. Updated community note.
2021-12-30 21:31:50	CISAGov	Updated communityVulnerable. Updated vendor link HOLOGIC Advisory Link. Updated community note. Updated community note.