UCC Edge: Logback Vulnerability False Positive (CVE-2021-42550)
Summary: This article provides a list of security vulnerabilities that cannot be exploited on Dell UCC Edge 2.0.2, but which may be identified by security scanners.
This article applies to
This article does not apply to
This article is not tied to any specific product.
Not all product versions are identified in this article.
Security Article Type
Security KB
CVE Identifier
CVE-2021-42550
Issue Summary
See the 'Recommendation' section below for details on each CVE.
Recommendations
The vulnerabilities listed in the table below are in order by the date on which UCC Edge Engineering determined that the UCC Edge 2.0.2 was not vulnerable.
| Third-party Component | CVE ID | Summary of Vulnerability | Reason why Product is not Vulnerable | Date Determined False Positive |
| Logback | CVE-2021-42550 | In Logback version 1.2.7 and earlier versions, an attacker with the required privileges to edit configurations files may potentially craft a malicious configuration allowing to execute arbitrary code loaded from LDAP servers. | Logback 1.2.3 is used in our released product of UCC Edge 2.0.2 but the application is not using any configuration file for Logback, which makes it not possible to exploit this vulnerability. | 2022-01-19 |
Legal Disclaimer
Affected Products
UCC EdgeProducts
Product Security InformationArticle Properties
Article Number: 000195400
Article Type: Security KB
Last Modified: 19 سبتمبر 2025
Version: 2
Find answers to your questions from other Dell users
Support Services
Check if your device is covered by Support Services.