---
title: [Security Tip] December Security Threats Summarized
description: Ensure your IT team knows about these security events from December 2021. Prime Care Tech clients receive these updates weekly.
---

[News | Prime Care Technologies ](https://www.primecareholdings.com/news)

# [[Security Tip] December Security Threats Summarized](https://www.primecareholdings.com/news/security-tip-dec-security-threats-summarized)

 Written by [Prime Care Tech Security Team](https://www.primecareholdings.com/news/author/prime-care-tech-security-team) | Mon, Jan 10, 2022 @ 03:59 PM

Each week our security team tracks threats, vulnerabilities, and patches announced by leading IT experts and vendors to ensure we prioritize and address them for our [managed IT services](https://www.primecaretech.com/primecloud-it-services) clients. Below you'll find our monthly recap of all events. If you're not a client, make sure your team knows about these security events, as well as future ones. 

#### High Impact

| **Company/Source** | **Product** | **Type** |
| --- | --- | --- |
| Apache | Log4j | New release (v2.15.0) for critical RCE vulnerability under exploitation Note: While our apps do not use, we continue to review our systems and assist primeCLOUD clients with other/impacted apps. |
| Zoho | ManageEngine Desktop Central & Desktop Central MSP | Security advisory |

#### Medium Impact

| **Company/Source** | **Product** | **Type** |
| --- | --- | --- |
| Google | Chrome | Security updates |
| Microsoft | Multiple | Security updates |
| VMware | n/a | Security update |

#### Low Impact

| **Company/Source** | **Product** | **Type** |
| --- | --- | --- |
| Apple | Multiple | Security update |
| Mozilla | Firefox, Firefox ESR, and Thunderbird | Security updates |

#### No Impact to Our Clients/FYI

| **Company/Source** | **Product** | **Type** |
| --- | --- | --- |
| Adobe | Multiple | Security updates |
| Apache | HTTP Server | Server-side request forgery (SSRF) - CVE-2021-40438 |
| CISA | Hillrom Welch Allyn Cardiology Products | Security advisory |
| CISA | WebHMI | Security advisory of vulnerabilities |
| CISA/FBI | Zoho ManagedEngine ServiceDesk Plus | Alert on active exploitation - CVE-2021-44077 |
| CISA/NSA | 5G Cloud Infrastructures | Guidance on securing |
| ManageEngine | ADSelfService Plus | APT exploitation |
| MikroTik | RouterOS | Directory traversal vulnerability - CVE-2018-14847 |
| Mozilla | Network Security Services | Security updates |
| Qualcomm | Multiple Chipsets | Improper input validation vulnerability - CVE-2020-11261 |
| SAP | Multiple | Security updates (Dec) |
| SonicWall | SMA 100 Series Appliances | Security advisory |
| Zoho | ManagedEngine ServiceDesk | Authentication bypass vulnerability - CVE-2021-37415 |
| Zoho | ManagedEngine ServiceDesk Plus | Remote code execution - CVE-2021-44077 |

 

If you're not confident your organization is on top of weekly security threats, vulnerabilities, and patches, it's time to conduct a [cyber security audit](https://www.primecareholdings.com/snf-slf-cyber-security-self-audit-checklist-lp). Or better, [get in touch](https://www.primecareholdings.com/contact-us-prime-care-technologies) so we can walk you through critical items for your security checklist.

[View full post](https://www.primecareholdings.com/news/security-tip-dec-security-threats-summarized)

```json
{
  "@context" : "http://schema.org",
  "@type" : "BlogPosting",
  "author" : {
    "@type" : "Person",
    "name" : "Prime Care Tech Security Team"
  },
  "dateModified" : "2022-01-10T15:59:26.327Z",
  "datePublished" : "2022-01-10T15:59:25Z",
  "headline" : "[Security Tip] December Security Threats Summarized",
  "image" : {
    "@type" : "ImageObject",
    "height" : 1260,
    "url" : "https://info.primecaretech.com/hubfs/Email%20Banners/December-Keeping-Up-with-Cyber-Predators-Track-threats-vulnerabilities-patches%20%281%29.png",
    "width" : 2240
  },
  "mainEntityOfPage" : "https://www.primecareholdings.com/news/security-tip-dec-security-threats-summarized",
  "publisher" : {
    "@type" : "Organization",
    "logo" : {
      "@type" : "ImageObject",
      "height" : 60.0,
      "url" : "https://info.primecaretech.com/hubfs/Branding%20(PCT-Logos-Pics)/Prime%20Care%20Technologies%20Logo_2945_5415.svg",
      "width" : 60.000004
    },
    "name" : "Post-Acute Care News"
  }
}
```