CVE-2021-44228: Apache Log4j2 JNDI features do not protect against attacker controlled LDAP and other JNDI related endpoints.

On December 9, 2021, the following critical vulnerability in the Apache Log4j Java logging library affecting all Log4j2 versions earlier than 2.15.0 was disclosed: Paying for 100 hours to make this someone else's problem is cheap compared to the cost of downtime.Critical Vulnerabilities in Apache Log4j Java Logging Library Customers who try stuff like this on their own end up with twice as much downtime or so many calls to TAC that Cisco starts asking the partner why they let the customer do this on their own. I've been deploying and upgrading Cisco UC for 12 years now and I've run across exactly 1 customer who was able to do an upgrade like this on their own that didn't turn into an unmitigated disaster, and that was after they paid for 40 hours of consulting to help with the licensing and planning. Refresh upgrade means each node will take several hours to upgrade and will go through several unavoidable reboots during that period, so you may want to look at using Prime Collaboration Deployment to do a migration upgrade, but that comes with its own challenges. Major version upgrade means license migration, so you're going to need help ordering the correct upgrade SKUs, setting up your Smart License Account, and getting systems registered correctly.

Provide your Cisco partner your business requirements and any access they need to complete the upgrade, including your downtime limitations.ġ1.5 to 12.5 is not just an SU, it is a major version upgrade and a refresh upgrade.

Contact your Cisco partner and ask for a quote to do the upgrade for you.I feel UC can do this quite well and is designed to handle.

We’re not opposed to some billable questions and such here and there from our vendor.īeing a 24x7 hospital, nursing home, assisted living, dialysis, and medical office building along with contracting out our phone services to the local clinic, surgeon’s office, and soon an urgent care, downtime needs to be minimized. Our partner would put in about 100 hours to do it for us and we don’t really want to spend that kind of money and i feel (as does our partner) that we can do it ourselves. I’ve picked up a lot over time but I’ve never done a minor (SU) update let alone a major one. I’ve been managing UC for 2.5 years but we had a partner put in the system. And I feel there tends to be some assumptions made when they write it. Around UC it seems to edge towards too much. I know read the documentation applies here but I always feel like Cisco’s doc has either too little or too much. Does anyone have a good checklist to follow for upgrading CUCM/CIMP/UCXN from 11.5 SU4 to 12.5 SU3? We use Jabber on iOS quite a bit so I have to get this done by Q2 of 2021.

Cisco uccx 11.5 acd checklist