Johnson Controls Sensormatic Electronics Illustra
Advisory ansehen veröffentlicht 2021-09-02
Successful exploitation of this vulnerability could allow a local attacker to obtain super user access to the underlying Linux operating system.
01
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2021-3156US | high7.8OT kritisch | KEV | ||
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privilege escalation to root via "sudoedit -s" and a command-line arg… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- ICS Advisory ICSA-21-245-01 JSONself
- Recommended Practicesexternal
- Recommended Practicesexternal
- Recommended Practicesexternal
03
Behebungen (8)
- MitigationFlex Gen 2
Flex Gen 2: upgrade to Version 1.9.4
- MitigationInsight
Flex Gen 2: upgrade to Version 1.9.4
- MitigationPro 2
Flex Gen 2: upgrade to Version 1.9.4
- MitigationPro Gen 3
Flex Gen 2: upgrade to Version 1.9.4
- BehobenFlex Gen 2
Pro Gen 3: upgrade to Version 2.8.0
- BehobenInsight
Pro Gen 3: upgrade to Version 2.8.0
- BehobenPro 2
Pro Gen 3: upgrade to Version 2.8.0
- BehobenPro Gen 3
Pro Gen 3: upgrade to Version 2.8.0
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan