From 3cd669cb2e3a6c5bcd45f5b27e6d374c8552f97e Mon Sep 17 00:00:00 2001 From: iainDe <96153057+iainDe@users.noreply.github.com> Date: Wed, 22 Dec 2021 09:23:14 -0600 Subject: [PATCH] Update SOFTWARE-LIST.md --- SOFTWARE-LIST.md | 69 +++++++++++++++++++++++++++++++++++++++++++++++- 1 file changed, 68 insertions(+), 1 deletion(-) diff --git a/SOFTWARE-LIST.md b/SOFTWARE-LIST.md index c06554c..58eb0b8 100644 --- a/SOFTWARE-LIST.md +++ b/SOFTWARE-LIST.md @@ -892,7 +892,74 @@ This list was initially populated using information from the following sources: | Ellucian | Ellucian Ellucian Portal | | Not Affected | | [Ellucian Response on Apache Log4j Issue](https://www.ellucian.com/news/ellucian-response-apache-log4j-issue) | | | 12/17/2021 | | Ellucian | Ellucian Workflow | | Not Affected | | [Ellucian Response on Apache Log4j Issue](https://www.ellucian.com/news/ellucian-response-apache-log4j-issue) | | | 12/17/2021 | | Ellucian | Ellucian PowerCampus | | Not Affected | | [Ellucian Response on Apache Log4j Issue](https://www.ellucian.com/news/ellucian-response-apache-log4j-issue) | | | 12/17/2021 | -| Emerson | | | | | [Emerson Cyber Security Notification](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | | +| Emerson | K-Series Coriolis Transmitters | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Prolink Configuration Software | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Prolink Mobile Application & ProcessViz Software | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 4732 Endeavor | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Vortex and Magmeter Transmitters | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | USM 3410 and 3810 Series Ultrasonic Transmitters | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Mark III Gas and Liquid USM | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Flarecheck FlowCheck Flowel & PWAM software | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | MPFM2600 & MPFM5726 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | DHNC1 DHNC2 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | WCM SWGM | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Fieldwatch and Service consoles | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 5726 Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Plantweb Advisor for Metrology and Metering Suite SDK | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Gas Chromatographs: M500/2350A MON2000 700XA/1500XA 370XA MON2020 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Gas Analysis: X-STREAM Enhanced (XEGP XEGK XEGC XEGF XEFD XECLD) | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Gas Detection: Millennium II Basic Single & Dual Channel 928 Wireless Gas Monitor/628 Gas Sensor 935 & 936 Open Path Gas Detector Millennium Air Particle Monitor | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Incus Ultrasonic gas leak detector | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Flame Detection: 975UF & 975UR Infrared Flame Detectors 975HR Infrared Hydrogen Flame Detector 975MR Multi-Spectrum Infrared Flame Detector | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Liquid Transmitters: 5081 1066 1056 1057 56 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Combustion: OCX OXT 6888 CX1100 6888Xi | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Spectrex family Flame Detectors and Rosemount 975 flame detector | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT4400 QCL General Purpose Continuous Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT5400 QCL General Purpose Continuous Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT5100 QCL Field Housing Continuous Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT5800 QCL Flameproof Housing Continuous Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT4215 QCL Packaging Leak Detection System | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT2211 QCL Aerosol Microleak Detection System | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT4404 QCL pMDI Leak Detection Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT4000 QCL Marine OEM Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | CT3000 QCL Automotive OEM Gas Analyzer | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 3051 & 3051S Pressure transmitter families | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 2051 Pressure Transmitter Family | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 4088 Pressure Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 2088 Pressure Transmitter Family | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 2090F/2090P Pressure Transmitters | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 4600 Pressure Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 215 Pressure Sensor Module | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 550 PT Pressure Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 326P Pressure Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 3144P Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 644 Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 848T Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 148 Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 248 Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 326T Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 327T Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 648 Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 4088 Upgrade Utility | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Engineering Assistant 5.x & 6.x | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | 248 Configuration Application | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount IO-Link Assistant | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount TankMaster and TankMaster Mobile | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount RadarMaster and RadarMaster Plus | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount Radar Configuration Tool | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount 2460 System Hub | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount 2410 Tank Hub | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount 3490 Controller | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount 2230 Graphical Field Display | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount 2240S Multi-input Temperature Transmitter | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount CMS/SCU 51/SCC | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount CMS/WSU 51/SWF 51 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount CMS/IOU 61 | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount Level Transmitters (14xx 33xx 53xx 54xx 56xx) | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount Radar Level Gauges (Pro 39xx 59xx) | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount Tank Radar Gauges (TGUxx) | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Rosemount Level Detectors (21xx) | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | +| Emerson | Emerson Aperio software | N/A | Not Affected | N/A | [Emerson Security Notification EMR.RMT21003-2](https://www.emerson.com/documents/automation/emerson-cyber-security-notification-en-7881618.pdf) | | | 12/17/2021 | | EnterpriseDT | | | | | [EnterpriseDT Statement](https://enterprisedt.com/blogs/announcements/enterprisedt-does-not-use-log4j/) | | | | | ESET | | | | | [ESET Statement](https://support.eset.com/en/alert8188-information-regarding-the-log4j2-vulnerability) | | | | | ESRI | ArcGIS Data Store | All | Fixed | Yes | [https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-software-and-cve-2021-44228-aka-log4shell-aka-logjam/](https://www.esri.com/arcgis-blog/products/arcgis-enterprise/administration/arcgis-software-and-cve-2021-44228-aka-log4shell-aka-logjam/) | Requires script remediation. ESRI has created scripts to remove the JndiLookup class, but has not issued patches to upgrade the Log4j versions | | 12/17/2021 |