Johnson Controls Exacq Technologies exacqVision
view advisory published 2021-04-29
A local attacker could exploit this vulnerability to obtain Super User access to the underlying Ubuntu Linux operating system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3156US | high7.8OT critical | KEV | ||
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg… | ||||
02
references
External citations — patches, advisories, analysis.
- ICS Advisory ICSA-21-119-03 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
remediations (1)
- MitigationexacqVision
Johnson Controls recommends users install the latest security updates for the Ubuntu Linux operating system.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan