Security News > 2022 > January > NHS warns of hackers exploiting Log4Shell in VMware Horizon
UK's National Health Service has published a cyber alert warning of an unknown threat group targeting VMware Horizon deployments with Log4Shell exploits.
According to the NHS notice, the actor is leveraging the exploit to achieve remote code execution on vulnerable VMware Horizon deployments on public infrastructure.
The actor is taking advantage of the presence of the Apache Tomcat service embedded within VMware Horizon, which is vulnerable to Log4Shell.
VMware Horizon is not the only VMware product targeted by threat actors using the Log4j vulnerability.
VMware released a security update for Horizon and other products last month, fixing CVE-2021-44228 and CVE-2021-45046 with versions 2111, 7.13.1, and 7.10.3.
All VMware Horizon admins are urged to apply the security updates as soon as possible.