CVE-2021-4034
highPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.949 · 100. PerzentilExploit · waffenfähigDEEURUUShinzugefügt 2022-06-27beheben bis 2022-07-18
erforderliche Maßnahme Apply updates per vendor instructions.
EPSS · bewertet 2026-10-22
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
Behebungen
Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.
Ein Hersteller-Fix ist verfügbar.
- BehobenSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)sick_psirt
Update to newest version
- BehobenSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- BehobenSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)sick_psirt
Update to newest version
- BehobenSCALANCE LPE9403siemens_psirt
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - BehobenSINUMERIK Edgesiemens_psirt
Update to V3.3.0 or later version
- BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (6GK5876-4AA10-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE S615 EEC (6GK5615-0AA01-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE LPE9403cisa_csaf_ot
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - BehobenSINUMERIK Edgecisa_csaf_ot
Update to V3.3.0 or later version
- BehobenLumada APM Edgecisa_csaf_ot
When applicable, Hitachi Energy recommends users update to Lumada APM Edge v6.3 at the earliest convenience.
- BehobenRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M804PB (6GK5804-0AP00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M874-2 (6GK5874-2AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M874-3 (6GK5874-3AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (6GK5876-4AA10-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE S615 (6GK5615-0AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - BehobenSCALANCE S615 EEC (6GK5615-0AA01-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - MitigationSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSCALANCE LPE9403siemens_psirt
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSINUMERIK Edgesiemens_psirt
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSCALANCE LPE9403cisa_csaf_ot
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSINUMERIK Edgecisa_csaf_ot
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationLumada APM Edgecisa_csaf_ot
APM should only be used to access the internet for authorized information. Portable computers and removable storage media should be carefully scanned for viruses before connecting to a control system.
cvss
Technischer Schweregrad, 0–10. Eine Zeile je Quelle.
Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen
SSVC
Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.
schwächen
Die CWE-Schwächeklassen, zu denen dies gehört.
ATT&CK-Techniken
ATT&CK-Techniken, die dies ermöglicht oder abbildet.
Exploits (186)
Öffentlicher Proof-of-Concept- und Exploit-Code.
- exploit/linux/local/cve_2021_4034_pwnkit_lpe_pkexecLocal Privilege Escalation in polkits pkexecwaffenfähig · metasploit
- EDB-50689PolicyKit-1 0.105-31 - Privilege EscalationPoC · exploit_db
- 0x05a/my-cve-2021-4034-pocmy PoCPoC · poc_in_github
- 0x4ndy/CVE-2021-4034-PoCCVE-2021-4034 PoCPoC · poc_in_github
- 12bijaya/CVE-2021-4034-PwnKit-Code to exploit CVE-2021-4034PoC · poc_in_github
betroffene Produkte (166)
Betroffene Produkte und Versionsbereiche.
Advisories (10)
Hersteller- und Ökosystem-Meldungen dazu.
- SCA-2022-0002PwnKit vulnerability affects multiple SICK IPCs2022-02-23csaf · sick_psirtDE
CVE-2021-4034 is a Local Privilege Escalation (LPE) vulnerability, located in the "Polkit" package installed by default on almost every major distribution of the Linux operating system. On 2022-01-25, Qualys released an advisory for this LPE vulnerability, advising to either update the “Polkit” package or implement the mitigation that Qualys recommends. In an air-gapped system SICK recommends all customers to implement at least the available mitigation for the corresponding Linux distribution. Please note, that this vulnerability can be exploited only if an user with unprivileged authorization can establish a connection to the systems.
- SSA-330556SSA-330556: PwnKit Vulnerability in SCALANCE LPE9403 and SINUMERIK Edge Products (CVE-2021-4034)2022-06-14csaf · siemens_psirtDE
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and recommends to update to the latest versions.
- SSA-419740SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.22023-03-14csaf · siemens_psirtDE
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service. Siemens has released updates for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2022-0302Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit AdministratorrechtenDeutsch2022-06-14csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.
- WID-SEC-W-2022-0432Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2022-06-21csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.
- WID-SEC-W-2022-1483PolicyKit: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2022-01-25csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in PolicyKit ausnutzen, um seine Privilegien zu erhöhen.
- WID-SEC-W-2023-0426IBM Spectrum Protect: Mehrere SchwachstellenDeutsch2022-03-13csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen 'Denial of Service'-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, einen 'Cross-Site-Scripting'-Angriff durchzuführen, beliebigen Code auszuführen, sensible Informationen offenzulegen und seine Privilegien zu erweitern.
- ICSA-22-167-16Siemens SCALANCE LPE 4903 and SINUMERIK Edge2022-06-14icsa · cisa_csaf_otUS
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSA-22-270-02Hitachi Energy APM Edge2022-09-27icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
- ICSA-23-075-01Siemens SCALANCE, RUGGEDCOM Third-Party2023-03-14icsa · cisa_csaf_otUS
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service. Siemens has released updates for the affected products and recommends to update to the latest versions.
auch bekannt als (4)
Weitere Namen und Kennungen dieser Entität.
quellen
Welche Quellen diesen Datensatz belegen und wann.
Referenzen (74)
Externe Belege — Patches, Meldungen, Analysen.
- https://access.redhat.com/errata/RHSA-2022:0265cnnvd
- https://access.redhat.com/errata/RHSA-2022:0266cnnvd
- https://access.redhat.com/errata/RHSA-2022:0267cnnvd
- https://access.redhat.com/errata/RHSA-2022:0268cnnvd
- https://access.redhat.com/errata/RHSA-2022:0269cnnvd
- https://access.redhat.com/errata/RHSA-2022:0270cnnvd
- https://access.redhat.com/errata/RHSA-2022:0271cnnvd
- https://access.redhat.com/errata/RHSA-2022:0272cnnvd
Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan