# Openhab Servers potential target for attacs **URL:** \ **Category:** Off-Topic\ **Tags:** hack, virus, malware\ **Created:** [October 18, 2022, 10:27am UTC](https://community.openhab.org/t/openhab-servers-potential-target-for-attacs/140073 "2022-10-18T10:27:07Z")\ **Posts on this page:** 1\ **Showing post:** 8
**Author:** ![wborn](https://community.openhab.org/user_avatar/community.openhab.org/wborn/32/55946_2.png) [@wborn](https://community.openhab.org/u/wborn)\ **Post date:** [October 19, 2022, 4:25am UTC](https://community.openhab.org/t/openhab-servers-potential-target-for-attacs/140073/8 "2022-10-19T04:25:30Z")
If you run an old openHAB version it may be vulnerable to Log4Shell, see: > [@openHAB and the log4j security vulnerability](https://community.openhab.org/t/openhab-and-the-log4j-security-vulnerability/129901): > > Dear all, You might have read yesterday in the IT press about the [critical remote code injection vulnerability](https://github.com/advisories/GHSA-jfh8-c2jp-5v3q) in the popular log4j library. This affects a [huge amount of Java-based software and servers](https://github.com/YfryTchsGD/Log4jAttackSurface). openHAB uses log4j as well (as part of Karaf) for logging, so what exactly does this mean for you? First of all: For exploiting the vulnerability, an attacker must have access to your server or at least be able to interact in a way with it that would let openHAB log some of his input. So as l… > **[Log4Shell](https://en.wikipedia.org/wiki/Log4Shell)** > > Log4Shell (CVE-2021-44228) is a zero-day vulnerability reported in November 2021 in Log4j, a popular Java logging framework, involving arbitrary code execution. The vulnerability had existed unnoticed since 2013 and was privately disclosed to the Apache Software Foundation, of which Log4j is a project, by Chen Zhaojun of Alibaba Cloud's security team on 24 November 2021. > Before an official CVE identifier was made available on 10 December 2021, the vulnerability circulated with the name "Log4... --- _[View the full topic](https://community.openhab.org/t/openhab-servers-potential-target-for-attacs/140073)._