Summary
The Linux kernel starting from 5.8 has a flaw which can lead to privilege escalation for a local user. The kernel is used in several Versions of the FW of several WAGO products. All vulnerable PLCs are listed in chapter 'Affected Products'.
Details
Impact
An unprivileged user can use the 'pipe' functionality in the Linux kernel to write to read only files. This can lead to privilege escalation, because in this way unprivileged processes can inject code into root processes.
For a detailed description of the vulnerability see https://dirtypipe.cm4all.com/
Mitigation
- Restrict network access to the device.
- Use strong passwords
- Do not directly connect the device to the internet
- Disable unused TCP/UDP-ports
Remediation
We recommend all affected users to update to the firmware version listed below.
## Series WAGO PFC100/PFC200 and WAGO Compact Controller CC100
| Product | Fixed in Firmware Version |
|----------------------|----------------------------|
| 750-81xx/xxx-xxx | 03.09.04(21) |
| 750-8217/xxx-xxx | 03.09.05(21) |
| 750-82xx/xxx-xxx | 03.09.04(21) |
| 751-9301 | 03.09.04(21) |
## Series WAGO Touch Panel 600 and WAGO Edge Controller
| Product | Fixed in Firmware Version |
|----------------------|----------------------------|
| 762-4xxx | 03.07.19(19) |
| 762-5xxx | 03.07.19(19) |
| 762-6xxx | 03.07.19(19) |
| 752-8303/8000-002 | 03.07.19(19) |
Vulnerabilities 1
-
High 7.8
A flaw was found in the way the "flags" member of the new pipe buffer structure was lacking proper initialization in co…
KEV Apr 25, 2022
Revision history
-
#2
Fix: quotation mark
-
#1
Initial revision.
References
-
VDE-2022-009: WAGO: Multiple Products affected by Linux Kernel Vulnerability Dirty Pipe - HTML
https://certvde.com/en/advisories/VDE-2022-009/
-
Vendor PSIRT
https://www.wago.com/psirt
-
CERT@VDE Security Advisories for WAGO GmbH & Co. KG
https://certvde.com/en/advisories/vendor/wago/