On December 10th, the NATIONAL VULNERABILITY DATABASE published the bug identified as CVE-2021-44228 now known as Log4Shell in Apache log4j component, an open-source Java logging library provided by Apache Software Foundation used in all kinds of Java applications, which allows an attacker to execute arbitrary code on any system that uses the Log4j library to write out log messages. It was immediately rated with the maximum severity of 10 on the CVSS scale. The Apache Foundation have released an emergency update.

OMRON Industrial Automation Business (IAB) group has completed the investigation into whether our products would be affected by Apache Log4j. We have confirmed that vulnerabilities caused by Apache Log4j do not affect OMRON products distributed in the market. We strive to continuously improve cybersecurity and will respond to any vulnerabilities in our products and solutions. If you have any questions or concerns, please don’t hesitate to contact your local OMRON office.