Log4j Vulnerability (CVE-2021-44228) – Does it Affect My Device?

The “Log4j” vulnerability was reported late last week. It is a Java-based software that many large organizations use to configure their applications. According to cybersecurity experts, Log4j is one of the most popular logging libraries used online. It gives software developers a way to build a record of activity to be used for a variety of purposes (e.g. troubleshooting, auditing, data tracking). Since it is both open-source and free, the library essentially touches every part of the internet.

Many of you have been asking if this affects your 5Gstore hardware. Here’s an outline of what we found:

  • 5Gstore.com – Not affected.
    •  “We do not use Java and thus our services are unaffected.” 
  • PeplinkNot affected
    • “Peplink has verified and confirmed that none of our products, including InControl 2 and InControl Appliance, are using the Log4j software. Peplink is therefore not affected by this vulnerability.”
  • CradlepointProducts Affected: NCM (patched 12/11/2021), NCP (patch in progress). 
    • Cradlepoint identified one vulnerability within NetCloud Perimeter (NCP). They are in the process of upgrading Log4j within NCP, and NCM (as a precaution) to the latest version. 
  • Sierra WirelessAM/ AMM Servers affected
    • Patches have been made available.
  • DigiNot affected.
    • “Our products and not affected by this vulnerability.” 
  • Inseego – Not affected.
    • “At Inseego, the security of our products and services is a top priority. Inseego is taking appropriate measures to address the vulnerability reported in the Apache Log4j 2 Java library (also known as Log4Shell). At this time, there have been no successful exploits observed in Inseego products, solutions or in the Inseego environment. We are continually monitoring our products and systems and taking steps to continue to protect our critical applications. Inseego will continue to assess and remediate threats posed by the Log4j vulnerability. Please contact customer support if you have any specific questions or concerns.”
  • NetComm – Not affected. 
    • “We aren’t using any java applications on any of the modems, so they are not affected by this vulnerability.”
  • Switch Always On – Not affected. 
    • “Fortunately, none of our services has the log4j package installed. Some of the external services linked to our system announce it, but those services didn’t cause functional issues.”
  • Remote Power IP Switch – Not affected.
    • “Thankfully, we don’t use Apache Log4j on any of our products.”

T-Mobile Certifies the Sierra Wireless XR Series Routers on the 5G Network

Sierra Wireless, a world leading IoT solutions provider, announced today that its AirLink® XR Series cellular routers architected for 5G performance, are certified to operate on T-Mobile’s 5G network – the largest, fastest and most reliable in the United States. This includes the models XR80 and XR90. 

The supercharged AirLink XR90 is purpose-built for public safety and transit with available dual-5G cellular radios and dual independent 4×4 MIMO Wi-Fi 6 antennas. It is the highest performing, most flexible router in the Sierra portfolio. The AirLink XR80 is optimized for fixed and mobile applications. The available dual-5G cellular radio and 5X4 MIMO Wi-Fi 6 delivers flexibility for customized configurations. 

These solutions deliver the full performance of 5G across any network (5G, Wi-Fi 6, Ethernet) enabling customers to leverage the higher data speeds and lower latency of 5G, required for real-time video streaming in mission-critical and high performance business-critical environments. Security is designed into the routers with device to cloud security including secure boot, cryptographic keys, and support for WPA-3. Each model can accommodate expansion modules and are purpose-built for rugged environments. 

In addition, both are fully-supported, out-of-the box solutions complete with integrated device management, advanced mobility reporting and 24/7 technical support. AirLink Connection Manager delivers complete VPN security and their AirLink Professional Services maximizes your system performance and customer satisfaction. 

Yet another added benefit to your remote access and out of band management – an embedded LPWA cellular radio, connected through Sierra Wireless Global Connectivity, provides an always-on link to ALMS (AirLink Management System (ALMS), is a cloud-based management platform which includes remote device management and mobility-focused reporting through AirLink Premium). This unique capability ensures the ongoing operational success of these 5G deployments.

“The XR Series is our fastest, most intelligent, flexible, and secure router yet,” said Tom Mueller, Vice President of Product Enterprise Networking, Sierra Wireless. “The XR Series routers are purpose-built for advanced, mission and business-critical 5G applications. With a passively cooled industrial design, future-proof flexibility offering single and dual 5G as well as Wi-Fi 6 radio options, always-on connectivity, rapid response, and strong multi-layered end-to-end security, they boast best-in-class reliability. When you combine this performance with T-Mobile’s industry-leading 5G network , it’s easy to see why you should choose Sierra Wireless to enable your next-generation applications.”

For more information about these products, contact your friends at 5Gstore!

Tech Tip: How to Use VLANs to Secure Your Router Network

IoT devices – such as cameras, smart thermostats & doorbells – can generally be less secure than most network attached devices (i.e. computers, network drives, servers, etc). Still, they require Internet service to operate and allow you remote access for control and monitoring. In effort to better secure these devices from the rest of your network, this is where creating a “VLAN” can help. This stands for “Virtual Local Area Network.” This is much like creating a Guest WiFi network on your router, so it can be done on just about any router including Sierra Wireless, CradlePoint, Peplink and Digi devices. 

Check out our video on how to create a VLAN for IoT security here

For more videos like this, subscribe to our YouTube channel.