Vendor Resources

Resource	Link
Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	https://www.sophos.com/en-us/security-advisories/sophos-sa-20211210-log4j-rce

Community Resources

Resource	Link
Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos	https://www.sophos.com/en-us/security-advisories/sophos-sa-20211210-log4j-rce

Community Notes

Source	Note
NCSC-NL	CVE-2021-4104: Not vuln ; CVE-2021-44228: Not vuln ; CVE-2021-45046: Not vuln ; CVE-2021-45105: Not vuln
NCSC-NL	Sophos Firewall does not use Log4j.
CISAGov	Sophos Firewall does not use Log4j.
CISAGov	Last Update: 12/12/2021

Sources

Date	Attribution	Description
2021-12-31 9:06:53	NCSC-NL	Updated communityNotVulnerable. Updated community note. Updated community link Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos. Updated community note.
2021-12-30 21:31:50	CISAGov	Updated communityNotVulnerable. Updated vendor link Advisory: Log4J zero-day vulnerability AKA Log4Shell (CVE-2021-44228) Sophos. Updated community note. Updated community note.