Security Updates

Commport is aware of the security issue relating to the open source Apache Log4j2 vulnerability that was first reported on December 9^th 2021. This issue, being tracked globally as CVE-2021-44228, and referred to in the press as “Log4Shell” is a remote code execution vulnerability which allows for unauthenticated remote code execution. For more specific and technical information about this vulnerability please review the CVE details located at NVD - CVE-2021-44228 (nist.gov). In continuing to follow these events closely, Commport is also tracking the follow up CVE, CVE 2021-45046 that results in a denial of service issue, as the industry works to address this vulnerability.

These vulnerabilities affect a large number of software and systems around the world. Commport and our Security Operations Team are tracking these issues, actively inspecting and surveilling our network to mitigate any risks associated with this vulnerability and to protect the integrity of the services delivered by Commport.

To date, we have performed scans internally and externally and are promptly responding to any patches and updates as they are made available by applicable software vendors. Commport can report that many of our core network devices are not subject to these vulnerabilities and that Commport generally does not use the Log4j2 utility as a component of applications developed by Commport.

These realities coupled with Commport’s active security program strongly position Commport to be made aware of, mitigate and respond to cybersecurity threats including CVE-2021-44228 and CVE 2021-45046.

We recognize the importance and the value of the services we offer and thank you for placing your trust in Commport. Please know that we are working to identify any risks associated with this issue and are addressing them as quickly and effectively as possible.