CVE-2021-4034
highpriority · act · 90OT risk · criticalKEV · exploitedEPSS 0.949 · 100 %ileexploit · weaponizedDEEURUUSadded 2022-06-27remediate by 2022-07-18
required action Apply updates per vendor instructions.
EPSS · scored 2026-10-22
Red Hat Polkit Out-of-Bounds Read and Write Vulnerability
A local privilege escalation vulnerability was found on polkit's pkexec utility. The pkexec application is a setuid tool designed to allow unprivileged users to run commands as privileged users according predefined policies. The current version of pkexec doesn't handle the calling parameters count correctly and ends trying to execute environment variables as commands. An attacker can leverage this by crafting environment variables in such a way it'll induce pkexec to execute arbitrary code. When successfully executed the attack can cause a local privilege escalation given unprivileged users administrative rights on the target machine.
remediations
Vendor fix, mitigation, or workaround guidance, as published by each source.
A vendor fix is available.
- FixedSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)sick_psirt
Update to newest version
- FixedSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)sick_psirt
Update to newest version
- FixedSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)sick_psirt
Update to newest version
- FixedSCALANCE LPE9403siemens_psirt
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSINUMERIK Edgesiemens_psirt
Update to V3.3.0 or later version
- FixedRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M804PB (6GK5804-0AP00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M874-2 (6GK5874-2AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M874-3 (6GK5874-3AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (6GK5876-4AA10-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE S615 EEC (6GK5615-0AA01-2AA2)siemens_psirt
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE LPE9403cisa_csaf_ot
Update to V2.0 or later version
https://support.industry.siemens.com/cs/ww/en/view/109811123/ - FixedSINUMERIK Edgecisa_csaf_ot
Update to V3.3.0 or later version
- FixedLumada APM Edgecisa_csaf_ot
When applicable, Hitachi Energy recommends users update to Lumada APM Edge v6.3 at the earliest convenience.
- FixedRUGGEDCOM RM1224 LTE(4G) EU (6GK6108-4AM00-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedRUGGEDCOM RM1224 LTE(4G) NAM (6GK6108-4AM00-2DA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M804PB (6GK5804-0AP00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M812-1 ADSL-Router (Annex A) (6GK5812-1AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M812-1 ADSL-Router (Annex B) (6GK5812-1BA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M816-1 ADSL-Router (Annex A) (6GK5816-1AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M816-1 ADSL-Router (Annex B) (6GK5816-1BA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M826-2 SHDSL-Router (6GK5826-2AB00-2AB2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M874-2 (6GK5874-2AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M874-3 (6GK5874-3AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-3 (EVDO) (6GK5876-3AA02-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-3 (ROK) (6GK5876-3AA02-2EA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (6GK5876-4AA10-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (EU) (6GK5876-4AA00-2BA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE M876-4 (NAM) (6GK5876-4AA00-2DA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM853-1 (EU) (6GK5853-2EA00-2DA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM856-1 (EU) (6GK5856-2EA00-3DA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE MUM856-1 (RoW) (6GK5856-2EA00-3AA1)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE S615 (6GK5615-0AA00-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - FixedSCALANCE S615 EEC (6GK5615-0AA01-2AA2)cisa_csaf_ot
Update to V7.2 or later version
https://support.industry.siemens.com/cs/document/109817007/ - MitigationSICK ERGO,DISP,KIT,C6X,CUSTOM all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 1TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, EOS1300, M16G, 2TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, K700-SE-MS4X, M16G, 1TB all versions (Ubuntu)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSAT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, SSXT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5321, UDS, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SP, R0,2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSAT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, SSCT, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401, UDS, R0, 2TB all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,SS-X all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE-5401,R0,2TB,UDS-X all versions (RedHat)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 1TB, LINUX, CUSTOM all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC, MXE5401, M16G, 2TB, C7 all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSICK PC-MXE 5401, CUSTOM, C6, 1TB all versions (CentOS)sick_psirt
- In case your SICK IPC for Analytics has been set up normally, without a “kiosk” mode: - Log in as the \<root\> user (credentials will be supplied separately). - Start the \<terminal\> app. - At the command prompt, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Log out from \<root\> - In case your SICK IPC for Analytics has been set up in “kiosk” mode: Note: In this below example, the OS is assumed to be CentOS 6.8 running a Gnome 2.28.2 GUI with SICK Package Analytics pre-installed and running on Kiosk mode. - These instructions start from the default kiosk-mode display of Package analytics. - Press \<CTRL+F4\> on the keyboard. This will bring up the desktop for the \<guest\> user. - Select the green “running man” icon in the upper right. - Select \<Log Out\> in the dialog box. - In the ensuing dialog, press \<Cancel\>. It’s on a timer, so this step has to be done quickly. - This brings up a display that allows the user to log in to other accounts. Select \<other\>. - Enter \<root\> as the username. - Enter the root password. Note this will be provided in a separate email. - This brings up the root desktop. Click on the black terminal icon at the top of the display to bring up the command line prompt. - At the command line, enter the following command: \<chmod 0755 /usr/bin/pkexec\> - Click on the \<x\> in the upper right to close the terminal window. - As before click on the “running man” icon at the top of the display to bring up the logout screen. - Select \<Log Out\> in the ensuing dialogue. This completes the process. The system will automatically back in as the guest kiosk user.
https://access.redhat.com/security/vulnerabilities/RHSB-2022-001#mitigation - MitigationSCALANCE LPE9403siemens_psirt
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSINUMERIK Edgesiemens_psirt
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSCALANCE LPE9403cisa_csaf_ot
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationSINUMERIK Edgecisa_csaf_ot
Restrict system access to authorized personnel and follow a least privilege approach
- MitigationLumada APM Edgecisa_csaf_ot
APM should only be used to access the internet for authorized information. Portable computers and removable storage media should be carefully scanned for viruses before connecting to a control system.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
ATT&CK techniques
ATT&CK techniques this enables or maps to.
exploits (186)
Public proof-of-concept and weaponised exploit code.
- EDB-50689PolicyKit-1 0.105-31 - Privilege EscalationPoC · exploit_db
- 0x05a/my-cve-2021-4034-pocmy PoCPoC · poc_in_github
- 0x4ndy/CVE-2021-4034-PoCCVE-2021-4034 PoCPoC · poc_in_github
- 12bijaya/CVE-2021-4034-PwnKit-Code to exploit CVE-2021-4034PoC · poc_in_github
affected products (166)
Products and version ranges known to be affected.
advisories (10)
Vendor and ecosystem advisories describing this.
- SCA-2022-0002PwnKit vulnerability affects multiple SICK IPCs2022-02-23csaf · sick_psirtDE
CVE-2021-4034 is a Local Privilege Escalation (LPE) vulnerability, located in the "Polkit" package installed by default on almost every major distribution of the Linux operating system. On 2022-01-25, Qualys released an advisory for this LPE vulnerability, advising to either update the “Polkit” package or implement the mitigation that Qualys recommends. In an air-gapped system SICK recommends all customers to implement at least the available mitigation for the corresponding Linux distribution. Please note, that this vulnerability can be exploited only if an user with unprivileged authorization can establish a connection to the systems.
- SSA-330556SSA-330556: PwnKit Vulnerability in SCALANCE LPE9403 and SINUMERIK Edge Products (CVE-2021-4034)2022-06-14csaf · siemens_psirtDE
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and recommends to update to the latest versions.
- SSA-419740SSA-419740: Multiple Third-Party Component Vulnerabilities in RUGGEDCOM and SCALANCE Products before V7.22023-03-14csaf · siemens_psirtDE
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service. Siemens has released updates for the affected products and recommends to update to the latest versions.
- WID-SEC-W-2022-0302Xerox FreeFlow Print Server: Mehrere Schwachstellen ermöglichen Ausführen von beliebigem Programmcode mit AdministratorrechtenDeutsch2022-06-14csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um beliebigen Programmcode auszuführen, einen Cross-Site-Scripting-Angriff durchzuführen, Informationen offenzulegen, einen Denial-of-Service-Zustand zu verursachen oder Dateien zu manipulieren.
- WID-SEC-W-2022-0432Xerox FreeFlow Print Server: Mehrere SchwachstellenDeutsch2022-06-21csaf · cert_bundDE
Ein entfernter, authentisierter Angreifer kann mehrere Schwachstellen in Xerox FreeFlow Print Server ausnutzen, um die Vertraulichkeit, Verfügbarkeit und Integrität zu gefährden.
- WID-SEC-W-2022-1483PolicyKit: Schwachstelle ermöglicht PrivilegieneskalationDeutsch2022-01-25csaf · cert_bundDE
Ein lokaler Angreifer kann eine Schwachstelle in PolicyKit ausnutzen, um seine Privilegien zu erhöhen.
- WID-SEC-W-2023-0426IBM Spectrum Protect: Mehrere SchwachstellenDeutsch2022-03-13csaf · cert_bundDE
Ein entfernter, anonymer, authentisierter oder lokaler Angreifer kann mehrere Schwachstellen in IBM Spectrum Protect ausnutzen, um einen 'Denial of Service'-Zustand herbeizuführen, Sicherheitsmaßnahmen zu umgehen, einen 'Cross-Site-Scripting'-Angriff durchzuführen, beliebigen Code auszuführen, sensible Informationen offenzulegen und seine Privilegien zu erweitern.
- ICSA-22-167-16Siemens SCALANCE LPE 4903 and SINUMERIK Edge2022-06-14icsa · cisa_csaf_otUS
The products listed below contain a local privilege escalation vulnerability (CVE-2021-4034) found on polkit's pkexec utility, that could allow an unprivileged user to gain administrative rights. Siemens has released updates for the affected products and recommends to update to the latest versions.
- ICSA-22-270-02Hitachi Energy APM Edge2022-09-27icsa · cisa_csaf_otUS
Successful exploitation of this vulnerability could allow users to escalate privileges from a user account to root.
- ICSA-23-075-01Siemens SCALANCE, RUGGEDCOM Third-Party2023-03-14icsa · cisa_csaf_otUS
Multiple third-party component vulnerabilities were reported for the Busybox applet, the Linux Kernel, OpenSSL, OpenVPN and various other components used by the RUGGEDCOM and SCALANCE products. The vulnerabilities range from improper neutralization of special elements to improper handling of commands under certain circumstances, that could lead to code injection and denial of service. Siemens has released updates for the affected products and recommends to update to the latest versions.
also known as (4)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (74)
External citations — patches, advisories, analysis.
- https://access.redhat.com/errata/RHSA-2022:0265cnnvd
- https://access.redhat.com/errata/RHSA-2022:0266cnnvd
- https://access.redhat.com/errata/RHSA-2022:0267cnnvd
- https://access.redhat.com/errata/RHSA-2022:0268cnnvd
- https://access.redhat.com/errata/RHSA-2022:0269cnnvd
- https://access.redhat.com/errata/RHSA-2022:0270cnnvd
- https://access.redhat.com/errata/RHSA-2022:0271cnnvd
- https://access.redhat.com/errata/RHSA-2022:0272cnnvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan