PwnKit vulnerability affects multiple SICK IPCs
CVE-2021-4034 is a Local Privilege Escalation (LPE) vulnerability, located in the "Polkit" package installed by default on almost every major distribution of the Linux operating system. On 2022-01-25, Qualys released an advisory for this LPE vulnerability, advising to either update the “Polkit” package or implement the mitigation that Qualys recommends. In an air-gapped system SICK recommends all customers to implement at least the available mitigation for the corresponding Linux distribution. Please note, that this vulnerability can be exploited only if an user with unprivileged authorization can establish a connection to the systems.
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-4034US | high7.8OT critical | KEV | ||
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as pri… | ||||
references
External citations — patches, advisories, analysis.
remediations (34)
- MitigationSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - FixedSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)
Update to newest version
- FixedSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)
Update to newest version
- FixedSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)
Update to newest version
- FixedSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)
Update to newest version
- FixedSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)
Update to newest version
- FixedSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)
Update to newest version
- FixedSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)
Update to newest version
- FixedSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)
Update to newest version
- FixedSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)
Update to newest version
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan