Johnson Controls CEM Systems AC2000
view advisory published 2021-11-30
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access on the underlying Linux operating system.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-3156US | high7.8OT critical | KEV | ||
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationCEM Systems AC2000
Do not click web links or open unsolicited attachments in email messages.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan