Is the Orbi WiFi 6 RBR750 vulnerable to the Log4J Zero Day vulnerability CVE-2021-44228?

Question

Is there a vulnerability in Orbi RBR750 to the Log4J Zero Day?

CrimpOn · Answer

Orbi does not use Apache as the web server, so my guess is "no".

FURRYe38 · Answer

Netgear has set up a community forum specifically for the Orbi AX (WiFi 6) products. Most of the people who watch that forum are more likely to have experience with Orbi AX and know how to work it better than those of us who follow this "general Orbi" forum. Might be more likely to find someone who has a solution if the question is posted there:https://community.netgear.com/t5/Orbi-AX/bd-p/en-home-orbi-ax
Please use this link to the main forum product list to review and choose where to make your posts.&nbsp;https://community.netgear.com/t5/NETGEAR-Forum/ct-p/en-netgear
Thank you
&nbsp;

Hud12 · Answer

You don't need to be using an Apache server to have the Log4j vulnerability. Log4j is a java based logging framework that is widely used even outside of an Apache server.

CrimpOn wrote:
Orbi does not use Apache as the web server, so my guess is "no".

CrimpOn · Answer

There is a post from a Netgear employee on this topic:
https://community.netgear.com/t5/Smart-Plus-and-Smart-Pro-Managed/Has-Netgear-GS748TS-been-affected-by-Log4J/m-p/2173569&nbsp;

Forum Discussion

Is the Orbi WiFi 6 RBR750 vulnerable to the Log4J Zero Day vulnerability CVE-2021-44228?

4 Replies