Apache Log4j2

Security Advisories Overview

See details and advisories on the security vulnerabilities CVE-2021-45105, CVE-2021-45046 and CVE-2021-44228 related to Apache Log4j2.

Apache Log4j2 CVE-2021-45105 Security Vulnerabilities

CVE-2021-45105 (mitre.org)

Affected Vector Product	Advisory released on	Advisory Version	Remarks
CANape, via vMDM and ElasticSearch	2021-12-20	1.0	Not affected
DaVinci Configurator 5	2022-01-17	1.3	Follow the instructions in the security advisory
DaVinci Developer Adaptive	2022-01-17	1.2	Follow the instructions in the security advisory
Package Manager for MICROSAR	2021-12-21	1.1	Follow the instructions in the security advisory
PREEvision	2021-12-21	1.2	Follow the instructions in the security advisory
Vector Hex Editor	2021-12-21	1.1	Follow the instructions in the security advisory
Vector License Client Linux	2021-12-20	1.0	Not affected
vLoggerCloud	2021-12-20	1.0	Not affected
vMDM	2021-12-20	1.0	Not affected
vMeasure, via vMDM and ElasticSearch	2021-12-20	1.0	Not affected
vSignalyzer, via vMDM and ElasticSearch	2021-12-20	1.0	Not affected

Apache Log4j2 CVE-2021-45046 Security Vulnerabilities

CVE-2021-45046 (mitre.org)

Affected Vector Product	Advisory released on	Advisory Version	Remarks
CANape, via vMDM and ElasticSearch	2022-02-18	1.1	- for CANape 20.0.x update your vMDM client to vMDM 3.3 HF2 - for CANape 19.0.x update your vMDM client to vMDM 3.3 HF2 - for CANape 17.0.x and 18.0.x update your vMDM client to vMDM 2.9 HF1 - for CANape 16.0 SP3 and later update your vMDM client to vMDM 1.4 HF1 - all versions before 16.0 SP3 are not affected
DaVinci Configurator 5	2022-01-17	1.3	Follow the instructions in the security advisory
DaVinci Developer Adaptive	2022-01-17	1.2	Follow the instructions in the security advisory
Package Manager for MICROSAR	2021-12-21	1.1	Follow the instructions in the security advisory
PREEvision	2021-12-21	1.2	Follow the instructions in the security advisory
Vector Hex Editor	2021-12-21	1.1	Follow the instructions in the security advisory
Vector License Client Linux	2021-12-20	1.0	Update your client to the latest version (2.3). Download the updated client here.
vLoggerCloud	2021-12-20	1.0	Please update your vMDM client to vMDM 3.3 HF2 (or later) from vMDM client download. Alternatively you can download and install the updated Vector Logger Suite 4.1 HF. The required actions for the vMDM server in vLoggerCloud have already been executed by Vector.
vMDM	2022-02-18	1.3	Follow the instructions in the security advisory
vMeasure exp, via vMDM and ElasticSearch	2022-02-18	1.1	- for vMeasure 6.0.x update your vMDM client to vMDM 3.3 HF2 - for vMeasure 5.0.x update your vMDM client to vMDM 3.3 HF2 - for vMeasure 3.0.x and 4.0.x update your vMDM client to vMDM 2.9 HF1 - for vMeasure 2.0.x update your vMDM client to vMDM 1.4 HF1 - vMeasure 1.0.x is not affected
vSignalyzer, via vMDM and ElasticSearch	2022-02-18	1.1	- for vSignalyzer 20.0.x update your vMDM client to vMDM 3.3 HF2 - for vSignalyzer 19.0.x update your vMDM client to vMDM 3.3 HF2 - for vSignalyzer 17.0.x and 18.0.x update your vMDM client to vMDM 2.9 HF1 - for vSignalyzer 16.0.x update your vMDM client to vMDM 1.4 HF1 - all versions before 16.0 SP3 are not affected

Apache Log4j2 CVE-2021-44228 Security Vulnerabilities

CVE-2021-44228 (mitre.org)

Affected Vector Product	Advisory released on	Advisory Version	Remarks
CANape, via vMDM and ElasticSearch	2022-02-18	1.1	- for CANape 20.0.x update your vMDM client to vMDM 3.3 HF2 - for CANape 19.0.x update your vMDM client to vMDM 3.3 HF2 - for CANape 17.0.x and 18.0.x update your vMDM client to vMDM 2.9 HF1 - for CANape 16.0 SP3 and later update your vMDM client to vMDM 1.4 HF1 - all versions before 16.0 SP3 are not affected
DaVinci Configurator 5	2022-01-17	1.3	Follow the instructions in the security advisory
DaVinci Developer Adaptive	2022-01-17	1.2	Follow the instructions in the security advisory
Package Manager for MICROSAR	2021-12-21	1.1	Follow the instructions in the security advisory
PREEvision	2021-12-21	1.2	Follow the instructions in the security advisory
Vector Hex Editor	2021-12-21	1.1	Follow the instructions in the security advisory
Vector License Client Linux	2021-12-20	1.0	Update your client to the latest version (2.3). Download the updated client here.
vLoggerCloud	2021-12-20	1.0	Please update your vMDM client to vMDM 3.3 HF2 (or later) from vMDM client download. Alternatively you can download and install the updated Vector Logger Suite 4.1 HF. The required actions for the vMDM server in vLoggerCloud have already been executed by Vector.
vMDM	2022-02-18	1.3	Follow the instructions in the security advisory
vMeasure, via vMDM and ElasticSearch	2022-02-18	1.1	- for vMeasure 6.0.x update your vMDM client to vMDM 3.3 HF2 - for vMeasure 5.0.x update your vMDM client to vMDM 3.3 HF2 - for vMeasure 3.0.x and 4.0.x update your vMDM client to vMDM 2.9 HF1 - for vMeasure 2.0.x update your vMDM client to vMDM 1.4 HF1 - vMeasure 1.0.x is not affected
vSignalyzer, via vMDM and ElasticSearch	2022-02-18	1.1	- for vSignalyzer 20.0.x update your vMDM client to vMDM 3.3 HF2 - for vSignalyzer 19.0.x update your vMDM client to vMDM 3.3 HF2 - for vSignalyzer 17.0.x and 18.0.x update your vMDM client to vMDM 2.9 HF1 - for vSignalyzer 16.0.x update your vMDM client to vMDM 1.4 HF1 - all versions before 16.0 are not affected

Vector reserves the right to change or update this content without notice at any time to provide the latest available guidance.