Apache Log4j Vulnerability Response Statement

Over the past week, a new zero-day vulnerability in the Log4j Java software library was discovered and actively exploited by attacks. This vulnerability uses the Log4j software library to execute remote code on a system and can be used to install remote access shells. For more information on the vulnerability, please visit the CISA Alert Guidance page found here: https://www.cisa.gov/uscert/apache-log4j-vulnerability-guidance

Celerit Solutions is aware of this vulnerability and the Celerit MNS Team immediately took steps to ensure that all Celerit systems were secure. At this time, the Celerit MNS Team has identified one system that was susceptible to the Log4J vulnerability. This system was identified by both Celerit MNS and the third-party vendor that provides support for the system. Currently, no client systems or services are susceptible to the vulnerability. 

The Celerit MNS Team deployed all recommended patches to mitigate the vulnerability. They are also continuing to scan and monitor network traffic, as well as adding recommended blocking rules, to ensure that no malicious activity is taking place. At this time, there is no indication that the vulnerability was exploited on the susceptible system. The Celerit MNS Team will continue to monitor the situation and apply any necessary remediation's that are recommended as the situation continues to unfold. 

Sam Grubb

Chief Information Security Officer