Summary
Under specific circumstances, a local authenticated user may be able to exploit this vulnerability to gain administrative access.
Vulnerabilities 1
-
High 7.8
Sudo before 1.9.5p2 contains an off-by-one error that can result in a heap-based buffer overflow, which allows privileg…
KEV Apr 6, 2022
Revision history
-
#1
ICSA-21-147-02 Johnson Controls Sensormatic Electronics VideoEdge
References
-
ICS Advisory ICSA-21-147-02 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-147-02
-
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B