Affected Version(s)
| Product | Affected Version(s) | Platform | Language(s) |
|---|---|---|---|
| Deep Discovery Director (DDD) | 5.3 and below | Appliance | English |
Solution
Trend Micro has released the following solutions to address the issue:
| Product | Updated version | Notes | Platform | Availability | ||
|---|---|---|---|---|---|---|
| Deep Discovery Director | 5.3 CP B1228* | Readme | Appliance | Available Now | ||
| Deep Discovery Director |
| Readme | Appliance | Available Now |
*5.3 CP1228 replaces the previous B1225. Customers may upgrade from any 5.3 build 1225 or below to the latest CP1228.
**5.2 CP1403 replaces the previous B1400. Customers may upgrade from any 5.2 build 1400 or below to the latest CP1403 or to version 5.3 (recommended).
Please note that all versions of Trend Micro Deep Discovery Director 5.1 SP1 and below have officially reached End-of-Life (EOL) and no patch will be made available. Customers using older versions of DDD are strongly advised to upgrade to version 5.3 as soon as possible and apply the Critical Patch available above.
These are the minimum recommended version(s) of the patches and/or builds required to address the issue. Trend Micro highly encourages customers to obtain the latest version of the product if there is a newer one available than the one listed in this bulletin.
Customers are encouraged to visit Trend Micro’s Download Center to obtain prerequisite software (such as Service Packs) before applying any of the solutions above.
Manual Mitigation Option
There is a temporary manual workaround process that customers may apply if they need additional time to fully patch.
However, please note that this manual workaround process is not a full remediation of the issues due to new attack vectors that were recently found. This is only a temporary stopgap to help partially mitigate some exploit vectors.
Due to the nature of the workaround, customers who are interested in the process must contact Trend Micro Technical Support for further guidance because an individualized token and upgrade script must be generated on a per-customer level.
Other Reference(s)
- Trend Micro main Log4Shell Security Alert: https://success.trendmicro.com/solution/KA-0012637