Endress+Hauser: sudo vulnerability affects Endress+Hauser MCS200HW

Impact
If exploited, this vulnerability could potentially allow an unauthenticated attacker to compromise the availability, integrity, and confidentiality of the Endress+Hauser MCS200HW.

Mitigation
As a temporary mitigation measure, both system and network access to the affected functionality should be strictly restricted. Access should be limited to authorized personnel only, and exposure to external or untrusted networks should be minimized or fully blocked until an update of the display firmware has been completed.

Remediation
Endress+Hauser has released updated firmware versions that address this vulnerability.
The display unit's firmware versions below 4.3.4 are affected. To address the vulnerability,
customers are strongly recommended to update the display unit of their devices to firmware version
4.3.4.
Endress+Hauser will include this firmware version in the MCS200HW products starting with version
1.11.5.6R.
Alternatively, customers can contact Endress+Hauser directly to obtain the updated display firmware,
or download the original firmware - including update instructions - from the Phoenix Contact website
referenced below.
Customers are strongly advised to upgrade to the latest fixed version. For assistance, please contact your local Endress+Hauser service center.