Question: Are Milestone VMS products impacted by the Log4J vulnerability?

Answer: Milestone VMS products do not use Log4j and therefore they are not affected by CVE-2021-44228. Husky IVO, M- and X-series utilize MegaRAID Storage Manager, which does use Log4j; however, it has been confirmed that the version in use is not vulnerable. The Milestone Product Security Incident Response Team (PSIRT) will continue to monitor the situation and provide updates if any new information arises.

Article Number

000004036