Vendor Resources

Resource	Link
Siemens Healthineers	https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/cve-2021-44228

Community Resources

Resource	Link
Siemens Healthineers	https://www.siemens-healthineers.com/en-us/support-documentation/cybersecurity/cve-2021-44228

Community Notes

Source	Note
NCSC-NL	CVE-2021-44228: Vulnerable
NCSC-NL	“LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for “need to access” systems to network port 8090 in case a second console is connected.”
CISAGov	LOG4J is used in the context of the help system. Workaround: close port 8090 for standalone systems. Setup IP whitelisting for “need to access” systems to network port 8090 in case a second console is connected.
CISAGov	Last Update: 12/22/2021

Sources

Date	Attribution	Description
2022-01-03 13:16:44	NCSC-NL	Updated communityVulnerable. Updated community note. Updated community link Siemens Healthineers. Updated community note.
2021-12-30 21:31:50	CISAGov	Updated communityVulnerable. Updated vendor link Siemens Healthineers. Updated community note. Updated community note.