CVE-2022-0847

highPriorität · handeln · 90OT-Risiko · kritischKEV · ausgenutztEPSS 0.928 · 100. PerzentilExploit · waffenfähigDEEUNLRUUS

grimoire priorityP0 · Act now

Exploitable?

Yes · in the wild

CISA KEV · 111 exploits · waffenfähig

Likely / severe?

92.8% (100th) EPSS

CVSS 7.2 · high

Is it mine?

171 products

Prüfe deine Angriffsfläche

Who says so?

9 sources

cnnvd · enisa_euvd · fstec_bdu · osv

hinzugefügt 2022-04-25beheben bis 2022-05-16

erforderliche Maßnahme Apply updates per vendor instructions.

EPSS · bewertet 2026-10-23

Linux Kernel Privilege Escalation Vulnerability

A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in copy_page_to_iter_pipe and push_pipe functions in the Linux kernel and could thus contain stale values. An unprivileged local user could use this flaw to write to pages in the page cache backed by read only files and as such escalate their privileges on the system.

Behebungen

Hersteller-Fix, Mitigation oder Workaround, wie von den Quellen veröffentlicht.

Ein Hersteller-Fix ist verfügbar.

BehobenRUGGEDCOM ROX MX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX MX5000REsiemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1400siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1500siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1501siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1510siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1511siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1512siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1524siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX1536siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenRUGGEDCOM ROX RX5000siemens_psirt
Update to V2.17.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109997648/
BehobenSCALANCE LPE9403siemens_psirt
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/
Behobenwago_psirt
We recommend all affected users to update to the firmware version listed below. ## Series WAGO PFC100/PFC200 and WAGO Compact Controller CC100 | Product | Fixed in Firmware Version | |----------------------|----------------------------| | 750-81xx/xxx-xxx | 03.09.04(21) | | 750-8217/xxx-xxx | 03.09.05(21) | | 750-82xx/xxx-xxx | 03.09.04(21) | | 751-9301 | 03.09.04(21) | ## Series WAGO Touch Panel 600 and WAGO Edge Controller | Product | Fixed in Firmware Version | |----------------------|----------------------------| | 762-4xxx | 03.07.19(19) | | 762-5xxx | 03.07.19(19) | | 762-6xxx | 03.07.19(19) | | 752-8303/8000-002 | 03.07.19(19) |
BehobenSCALANCE LPE9403cisa_csaf_ot
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/
Mitigationwago_psirt
- Restrict network access to the device. - Use strong passwords - Do not directly connect the device to the internet - Disable unused TCP/UDP-ports

cvss

Technischer Schweregrad, 0–10. Eine Zeile je Quelle.

7.8

010

Basiswert 0–10 · höher = schwerwiegender · Vektor überfahren zum Auflösen

v2.07.2highAV:L/AC:L/Au:N/C:C/I:C/A:Cprimary · NVD / NIST USAusnutzbarkeit 3.9 · Auswirkung 10

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hprimary · NVD / NIST USAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:P/RL:O/RC:Csecondary · CISA US

v3.17.8highAV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · FSTEC (BDU) RU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · ENISA EU

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HsecondaryAusnutzbarkeit 1.8 · Auswirkung 5.9

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · Siemens ProductCERT DE

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · WAGO PSIRT DE

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H/E:Hsecondary · CVSS-BT (t0sche)

v3.17.8highCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:Hsecondary · NCSC-NL NL

SSVC

Eine Handlungsentscheidung — aus Ausnutzung und Auswirkung.

Exploitation: active · Automatable: no · Technical Impact: totalcoordinatorcisa_ssvcUS

schwächen

Die CWE-Schwächeklassen, zu denen dies gehört.

CWE-281USCWE-281USCWE-281USCWE-665USCWE-665USCWE-665USCWE-909US

Exploits (111)

Öffentlicher Proof-of-Concept- und Exploit-Code.

exploit/linux/local/cve_2022_0847_dirtypipeDirty Pipe Local Privilege Escalation via CVE-2022-0847waffenfähig · metasploit
EDB-50808Linux Kernel 5.8 < 5.16.11 - Local Privilege Escalation (DirtyPipe)PoC · exploit_db
0xIronGoat/dirty-pipeImplementation of Max Kellermann's exploit for CVE-2022-0847PoC · poc_in_github
0xeremus/dirty-pipe-pocPOC Exploit to add user to Sudo for CVE-2022-0847 Dirty Pipe VulnerabilityPoC · poc_in_github
4luc4rdr5290/CVE-2022-0847CVE-2022-0847PoC · poc_in_github
Al1ex/CVE-2022-0847CVE-2022-0847PoC · poc_in_github

betroffene Produkte (171)

Betroffene Produkte und Versionsbereiche.

Amazon Linux 2alle Versionencert_bundDEcpe:/o:amazon:linux_2:-
IBM Spectrum Protect 10.1alle Versionencert_bundDEcpe:/a:ibm:spectrum_protect:10.1
IBM Spectrum Protect 8.1alle Versionencert_bundDEcpe:/a:ibm:spectrum_protect:8.1
Ubuntu Linuxalle Versionencert_bundDEcpe:/o:canonical:ubuntu_linux:-
SCALANCE LPE9403alle Versionencisa_csaf_otUS
Siemens SCALANCE LPE9403< V2.0cisa_csaf_otUS
n/a Kernel≤ Linux Kernel 5.17 rc6enisa_euvdEU
Canonical Ltd. Ubuntu≤ 21.10fstec_bduRU
Canonical Ltd. Ubuntu≤ 20.04 LTSfstec_bduRU
Google Inc Androidalle Versionenfstec_bduRU
Novell Inc. SUSE Enterprise Storage≤ 7fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Availability≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Availability≤ 15 SP2fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Availability≤ 15 SP3fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Performance Computing≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise High Performance Computing≤ 15 SP2-LTSSfstec_bduRU
Novell Inc. SUSE Linux Enterprise High Performance Computing≤ 15 SP2-ESPOSfstec_bduRU
Novell Inc. SUSE Linux Enterprise Live Patching≤ 12 SP4fstec_bduRU
Novell Inc. SUSE Linux Enterprise Micro≤ 5.0fstec_bduRU
Novell Inc. SUSE Linux Enterprise Micro≤ 5.1fstec_bduRU

20 von 171 angezeigt

Advisories (7)

Hersteller- und Ökosystem-Meldungen dazu.

NCSC-2025-0382Kwetsbaarheden verholpen in Siemens productenNL2025-12-09csaf · ncsc_nlNL
Siemens heeft kwetsbaarheden verholpen in diverse producten als Building X, COMOS, Energy Services, Gridscale X, NX, RUGGEDCOM, SICAM, SIMATIC, SINEC, SINEMA, SIPLUS en Solid Edge.
SSA-202008SSA-202008: Multiple Vulnerabilities in Ruggedcom Rox Before V2.17.02025-12-09csaf · siemens_psirtDE
Ruggedcom ROX familly contain multiple vulnerabilities before V2.17.0 Siemens has released new versions for the affected products and recommends to update to the latest versions.
SSA-222547SSA-222547: Third-Party Component Vulnerabilities in SCALANCE LPE9403 before V2.02022-06-14csaf · siemens_psirtDE
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
VDE-2022-009WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe2022-04-06csaf · wago_psirtDE
The Linux kernel starting from 5.8 has a flaw which can lead to privilege escalation for a local user. The kernel is used in several Versions of the FW of several WAGO products. All vulnerable PLCs are listed in chapter 'Affected Products'.
WID-SEC-W-2022-0515IBM Spectrum Protect: Mehrere SchwachstellenDeutsch2022-06-29csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen Denial-of-Service-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen offenzulegen, beliebigen Code auszuführen, seine Rechte zu erweitern oder beliebigen Code mit Root-Rechten auszuführen.
ICSA-22-167-09Siemens SCALANCE LPE9403 Third-Party Vulnerabilities2022-06-14icsa · cisa_csaf_otUS
Multiple vulnerabilities in the third-party components CivetWeb, Docker, Linux Kernel and systemd could allow an attacker to impact SCALANCE LPE9403 confidentiality, integrity and availability. Siemens has released an update for the SCALANCE LPE9403 and recommends to update to the latest version.
ASB-A-2207416112022-05-01vendor · osvUS
In multiple functions of iov_iter.c, there is a possible out of bounds write due to uninitialized data. This could lead to local escalation of privilege in system libraries with no additional execution privileges needed. User interaction is not needed for exploitation.

auch bekannt als (6)

Weitere Namen und Kennungen dieser Entität.

quellen

Welche Quellen diesen Datensatz belegen und wann.

cnnvd enisa_euvd fstec_bdu osv cert_bund cisa_csaf_ot ncsc_nl siemens_psirt wago_psirt NVD CVE.org MITRE

veröffentlicht 2022-03-10geändert 2026-07-24

Referenzen (61)

Externe Belege — Patches, Meldungen, Analysen.

scry

Angreifer nutzen Schwachstellen wie diese gegen im Internet exponierte Dienste aus. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.

Kostenloser Scan