�ｿｽy�ｿｽ[�ｿｽW�ｿｽﾌ本�ｿｽ�ｿｽ�ｿｽ�ｿｽ

Hitachi

サーバ・クライアント製品セキュリティ情報

UPS�ｿｽ�ｿｽ�ｿｽi�ｿｽﾉゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽLog4j�ｿｽﾌ脆弱性(CVE-2021-44228�ｿｽ�ｿｽ)�ｿｽﾉつゑｿｽ�ｿｽ�ｿｽ

2023�ｿｽN2�ｿｽ�ｿｽ3�ｿｽ�ｿｽ �ｿｽX�ｿｽV

�ｿｽZ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ�ｿｽ�ｿｽh�ｿｽc�ｿｽ@hitachi-sec-2021-225

1. �ｿｽﾆ弱性�ｿｽﾌ難ｿｽ�ｿｽe

�ｿｽV�ｿｽ�ｿｽ�ｿｽi�ｿｽC�ｿｽ_�ｿｽ[�ｿｽG�ｿｽ�ｿｽ�ｿｽN�ｿｽg�ｿｽ�ｿｽ�ｿｽb�ｿｽN�ｿｽ�ｿｽ�ｿｽAApache Log4j�ｿｽﾌ脆弱性�ｿｽ�ｿｽｪ鯉ｿｽ�ｿｽJ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽ�ｿｽB
�ｿｽﾆ弱性�ｿｽﾌ難ｿｽ�ｿｽe�ｿｽﾉつゑｿｽ�ｿｽﾄは、�ｿｽ�ｿｽ�ｿｽL�ｿｽV�ｿｽ�ｿｽ�ｿｽi�ｿｽC�ｿｽ_�ｿｽ[�ｿｽG�ｿｽ�ｿｽ�ｿｽN�ｿｽg�ｿｽ�ｿｽ�ｿｽb�ｿｽN�ｿｽﾌホ�ｿｽ[�ｿｽ�ｿｽ�ｿｽy�ｿｽ[�ｿｽW�ｿｽ�ｿｽ�ｿｽQ�ｿｽﾆ願い�ｿｽﾜゑｿｽ�ｿｽB

�ｿｽ�ｿｽ�ｿｽﾌ脆弱性�ｿｽﾌ影�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽｯゑｿｽﾎ象撰ｿｽ�ｿｽi�ｿｽA�ｿｽ�ｿｽ�ｿｽ�ｿｽﾑ詳細ゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉ趣ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽﾌで、�ｿｽ�ｿｽ�ｿｽL�ｿｽﾎ搾ｿｽ�ｿｽ�ｿｽ�ｿｽ@�ｿｽﾉゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ閧｢�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB

2. �ｿｽﾎ象撰ｿｽ�ｿｽi

�ｿｽ�ｿｽ�ｿｽi�ｿｽ�ｿｽ �ｿｽ`�ｿｽ�ｿｽ �ｿｽﾎ擾ｿｽCVE �ｿｽe�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽｯゑｿｽVersion
PowerChute Business Edition GQS-VSU7BS100N CVE-2021-44228
CVE-2021-45046
*1 *2 		v10.0
PowerChute Network Shutdown for
Windows and Linux		 GQS-VSU7BLS420
GQS-VSU7BLS430		 v4.2, v4.3
PowerChute Network Shutdown for
Virtualization		 GQS-VSU7BLE420
GQS-VSU7BLE430		 v4.2, v4.3
PowerChute Network Shutdown for
Specialize OS		 GQS-VSU7BLP420
GQS-VSU7BLP430		 v4.2, v4.3
*1
�ｿｽ{�ｿｽA�ｿｽi�ｿｽE�ｿｽ�ｿｽ�ｿｽX�ｿｽﾌ��ｿｽ�ｿｽ�ｿｽ�ｿｽN�ｿｽﾌゑｿｽ�ｿｽ�ｿｽ�ｿｽ黷ｩ�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽb�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽﾆ、Hitachi, Ltd.�ｿｽﾈ外�ｿｽ�ｿｽWeb�ｿｽT�ｿｽC�ｿｽg�ｿｽ�ｿｽ�ｿｽ\�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽBHitachi�ｿｽﾍ、Hitachi�ｿｽO�ｿｽ�ｿｽ�ｿｽ�ｿｽWeb�ｿｽT�ｿｽC�ｿｽg�ｿｽﾌ擾ｿｽ�ｿｽ�ｿｽ�ｿｽﾇ暦ｿｽ�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽ轤ｸ�ｿｽA�ｿｽﾜゑｿｽ�ｿｽA�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉ関ゑｿｽ�ｿｽ�ｿｽﾓ任�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽB
*2
�ｿｽﾖ連�ｿｽ�ｿｽ�ｿｽ�ｿｽﾆ弱性CVE-2021-45105 *1�ｿｽﾉつゑｿｽ�ｿｽﾄ、�ｿｽ{�ｿｽ�ｿｽ�ｿｽi�ｿｽﾍ再帰�ｿｽI�ｿｽiself-referential�ｿｽj�ｿｽ�ｿｽLookup�ｿｽv�ｿｽ�ｿｽ�ｿｽﾉ対ゑｿｽ�ｿｽAlog4j.xml�ｿｽt�ｿｽ@�ｿｽC�ｿｽ�ｿｽ�ｿｽﾉデ�ｿｽt�ｿｽH�ｿｽ�ｿｽ�ｿｽg�ｿｽﾈ外�ｿｽﾌ難ｿｽ�ｿｽ�ｿｽﾌパ�ｿｽ^�ｿｽ[�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽC�ｿｽA�ｿｽE�ｿｽg�ｿｽ�ｿｽ�ｿｽg�ｿｽp�ｿｽ�ｿｽ�ｿｽﾄゑｿｽ�ｿｽﾈゑｿｽ�ｿｽ�ｿｽ�ｿｽﾟ、�ｿｽe�ｿｽ�ｿｽ�ｿｽﾍゑｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽB

3. �ｿｽﾎ搾ｿｽ�ｿｽ�ｿｽ�ｿｽ@

�ｿｽ�ｿｽ�ｿｽL�ｿｽV�ｿｽ�ｿｽ�ｿｽi�ｿｽC�ｿｽ_�ｿｽ[�ｿｽG�ｿｽ�ｿｽ�ｿｽN�ｿｽg�ｿｽ�ｿｽ�ｿｽb�ｿｽN�ｿｽﾌホ�ｿｽ[�ｿｽ�ｿｽ�ｿｽy�ｿｽ[�ｿｽW�ｿｽ�ｿｽ�ｿｽQ�ｿｽﾆゑｿｽ�ｿｽﾎ搾ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ閧｢�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽB

(1)  PowerChute Network Shutdown for Windows and Linux / Virtualization / Specialized OS v4.3 �ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽp�ｿｽﾌ包ｿｽ
[�ｿｽZ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ�ｿｽ�ｿｽ] PowerChute Network Shutdown v4.3/v4.4�ｿｽ�ｿｽApache Log4j�ｿｽﾆ弱性�ｿｽﾉ対ゑｿｽ�ｿｽ�ｿｽC�ｿｽ�ｿｽ�ｿｽv�ｿｽ�ｿｽ�ｿｽO�ｿｽ�ｿｽ�ｿｽ�ｿｽ (2022�ｿｽN2�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽJ)*1
(2)  PowerChute Network Shutdown for Windows and Linux / Virtualization / Specialized OS v4.2 �ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽp�ｿｽﾌ包ｿｽ(�ｿｽ�ｿｽ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽN�ｿｽﾌ会ｿｽ�ｿｽ黷ｩ�ｿｽ�ｿｽK�ｿｽp)
Apache Log4j�ｿｽﾆ弱性�ｿｽﾉ関ゑｿｽ�ｿｽ�ｿｽPowerChute Network Shutdown�ｿｽﾖの影�ｿｽ�ｿｽ�ｿｽﾆス�ｿｽN�ｿｽ�ｿｽ�ｿｽv�ｿｽg�ｿｽﾉゑｿｽ�ｿｽﾎ搾ｿｽﾉつゑｿｽ�ｿｽ�ｿｽ*1
Apache Log4j�ｿｽﾆ弱性�ｿｽﾉ関ゑｿｽ�ｿｽ�ｿｽPowerChute Network Shutdown�ｿｽﾖの影�ｿｽ�ｿｽ�ｿｽ�ｿｽ7Zip�ｿｽﾉゑｿｽ�ｿｽﾎ搾ｿｽﾉつゑｿｽ�ｿｽ�ｿｽ*1
(3)  PowerChute Business Edition v10.0 �ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽp�ｿｽﾌ包ｿｽ
�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�所�ｿｽ�ｿｽPowerChute Business Edition v10.0.5�ｿｽﾖのア�ｿｽb�ｿｽv�ｿｽf�ｿｽ[�ｿｽg�ｿｽﾉつゑｿｽ�ｿｽ�ｿｽ*1
PowerChute Business Edition v10.0.5�ｿｽﾖア�ｿｽb�ｿｽv�ｿｽf�ｿｽ[�ｿｽg�ｿｽ�ｿｽ�ｿｽ驍ｱ�ｿｽﾆにゑｿｽ�ｿｽAApache Log4j�ｿｽﾌ脆弱性�ｿｽ�ｿｽ�ｿｽﾎ策さゑｿｽﾜゑｿｽ�ｿｽB

4. �ｿｽ�ｿｽ�ｿｽ竄｢�ｿｽ�ｿｽ�ｿｽ墲ｹ�ｿｽ�ｿｽ

�ｿｽ�ｿｽ�ｿｽi�ｿｽT�ｿｽ|�ｿｽ[�ｿｽg�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾉゑｿｽ�ｿｽ竄｢�ｿｽ�ｿｽ�ｿｽ墲ｹ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽB

5. �ｿｽX�ｿｽV�ｿｽ�ｿｽ�ｿｽ�ｿｽ

2023�ｿｽN2�ｿｽ�ｿｽ3�ｿｽ�ｿｽ �ｿｽF �ｿｽ�ｿｽ�ｿｽﾌセ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ�ｿｽ�ｿｽy�ｿｽ[�ｿｽW�ｿｽﾌ��ｿｽ�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽX�ｿｽV�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽ�ｿｽB
2022�ｿｽN12�ｿｽ�ｿｽ16�ｿｽ�ｿｽ �ｿｽF �ｿｽ�ｿｽ�ｿｽﾌセ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ�ｿｽ�ｿｽy�ｿｽ[�ｿｽW�ｿｽﾌ��ｿｽ�ｿｽ�ｿｽ�ｿｽN�ｿｽ�ｿｽ�ｿｽ�ｿｽX�ｿｽV�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽ�ｿｽB
2021�ｿｽN12�ｿｽ�ｿｽ28�ｿｽ�ｿｽ �ｿｽF �ｿｽ�ｿｽ�ｿｽﾌセ�ｿｽL�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽB�ｿｽ�ｿｽ�ｿｽy�ｿｽ[�ｿｽW�ｿｽ�ｿｽV�ｿｽK�ｿｽ�成�ｿｽ�ｿｽ�ｿｽ�ｿｽﾑ費ｿｽ�ｿｽM�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽ�ｿｽ�ｿｽB

  • * �ｿｽ{�ｿｽy�ｿｽ[�ｿｽW�ｿｽﾅ記�ｿｽﾚゑｿｽ�ｿｽﾄゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽe�ｿｽ�ｿｽ\�ｿｽ�ｿｽ�ｿｽﾈゑｿｽ�ｿｽﾏ更�ｿｽ�ｿｽ�ｿｽ驍ｱ�ｿｽﾆゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽﾜゑｿｽ�ｿｽﾌで、�ｿｽ�ｿｽ�ｿｽ轤ｩ�ｿｽ�ｿｽ�ｿｽﾟゑｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽ�ｿｽB
OSZAR »