Question

Does anyone know if RMS or the Teltonika routers themselves are at risk from the Log4Shell (CVE-2021-44228) exploit?

I couldnt find anything on the forums or Wiki.

Answer 1

Hello,

Teltonika Networks devices and RMS platform are not vulnerable to CVE-2021-44228 exploit. I.e.

• The vulnerability itself is related with Apache service and Java-based logging utility called log4j.
• Our devices do not use Apache and do not have this library installed. Instead, we use httpd for our device web application service.
• RMS is also not using neither Apache web services (all Nginx), neither Java services/libraries, including log4j.