December 16, 2021
During the last couple of days, companies all over the world have been facing critical computer vulnerabilities detected in a utility called Log4j, which allows easy, password-free entry and remote code execution by exploiting the Java Logging Library.
As a company that follows the highest cybersecurity standards, Montelektro is aware of these threats and their potential harmful impacts on its customers’ environments.
Our IT experts have been continuously monitoring the situation by following the information issued by vendors of the components used in Montelektro IT infra and PCS solutions.
Therefore Montelektro invites all clients to follow the instructions for reducing exposure to the mentioned vulnerability.
Since the situation is changing by the hour, we invite all our clients to check regular updates that will be available on our website as we receive the newest updates from the software vendors.
We also kindly ask them to refer to our White paper – PCS IT maintenance, which describes the basic IT principles and security strategies that should be applied to Process Control Systems in general.
INSTRUCTIONS:
Security Advisory – CVE – 2021-44228 Apache Log4j R04 January 12,2022
Security Advisory – CVE-2021-44228 Apache Log4j R03 December 21, 2021
Security Advisory – CVE-2021-44228 Apache Log4j R02 December 20, 2021
Security Advisory – CVE-2021-44228 Apache Log4j December 16,2021:
White paper- PCS and IT maintenance and security -ROI