Announcement on "Apache Log4j2 Remote Code Execution Vulnerability"
2021-12-17
Dear TVT’s users and partners:
As a smart security solution supplier, Shenzhen TVT Digital Technology Co., LTD. (hereinafter referred to as “TVT”) always attaches great importance to the building of network security. Recently, TVT’s network security emergency center learned that the Cloud Security team of Alibaba reported the execution vulnerability of Apache Log4j2c to Apache authority. Therefore, TVT takes immediate actions to check the full range of products and hereby declares that:
All products of TVT, including IPCs, DVRs, NVRs, decoders and dedicated project devices, which are based on the depth customization and development of C++, make no reference to the jar package of Apache Log4j2. Thus, the above-mentioned products will not be affected by CVE-2021- 45046 and CVE-2021-44228.
TVT Company will continue to trace the real-time information of network security and provide safe, stable and reliable products and solutions for the customers and partners.
Best Regards