Important information for our customers

The cybersecurity issue CVE-2021-44228 in the log4j library is currently affecting a lot of software solutions worldwide. The software products of Atlas Copco are only mildly impacted by this issue, as far as we know yet.

Products/components not affected:

• All controller types
• Smart AMS (all versions)
• SQS3 (all versions); this includes the result data viewer SFO 1.x with all its components
• Production Analyzer
• QS-Loop
• ToolsNet 8 (all versions)
• ToolsNet 4000 (all versions)
• Alture
• TechCoverConnect
• Customized solutions (Application Center)
• ToolsTalk 2 (all versions)
• ToolsTalk (older versions)

Products/components that are affected:

• Error Proofing License Manager and SQS3 License Manager
• UPDATE 21.12.2021 All QA Supervisor versions

Our recommendation for the affected product is:

Error Proofing License Manager

Mitigation:

Only the web UI front-end of the License Manager uses the log4j library. It can be disabled without impacting Smart AMS or SQS3 functionality. Both products will still be able to fetch or return feature licenses from the License Manager. Only the management of new and existing feature licenses will not be possible while the UI is disabled.

Please follow the instruction below on how to temporarily disable the web UI of the License Manager. We will provide an updated version of the Error Proofing License Manager as soon as possible.

We highly recommend a software update to QA Supervisor version 6.03b or higher. 

To request the installation file or assistance with the installation, please contact us at: communications.tools@atlascopco.com

Temporary action until an update to QA Supervisor version 6.03b or higher is made:

To change the system configuration of QA Supervisor and temporarily fix this issue, please follow the instructions in the PDF link below.

If you need any support or in case of question, don’t hesitate to contact us via:

communications.tools@atlascopco.com

Atlas Copco