Summary
The display unit of the Endress+Hauser MCS200HW is affected by a sudo chroot vulnerability.
Details
Impact
If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the Endress+Hauser MCS200HW.
Mitigation
As general security measures, SICK recommends minimizing network exposure of the devices, restricting network access, and following recommended security practices in order to operate the devices in a protected IT environment.
Remediation
SICK recommends updating the display unit of the product to version 4.3.4 and ensuring that the product operates within a secure environment.
Vulnerabilities 1
-
Critical 9.3
Sudo before 1.9.17p1 allows local users to obtain root access because /etc/nsswitch.conf from a user-controlled directo…
KEV Sep 29, 2025
Revision history
-
#1.0.0
Initial version
References
-
Endress+Hauser
https://www.endress.com
-
SICK PSIRT Security Advisories
https://www.sick.com/psirt
-
ICS-CERT recommended practices on Industrial Security
https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
-
CVSS v3.1 Calculator
https://www.first.org/cvss/calculator/3.1
-
Standalone display firmware, update procedure and further details
https://www.phoenixcontact.com/de-de/produkte/touch-panel-wp-6121-wxps-1290802