It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.

Schneider Electric is aware of a vulnerability in Redis open-source database, affecting its Plant iT product. The Plant iT/Brewmaxx product is an object-oriented and PLC-based process control system with integrated Manufacturing Execution System functionality. The integrated and modular software platform consists of basic systems, modules and add-ons that can be flexibly combined. Failure to apply the mitigations provided below may risk privilege escalation, which could result in remote code execution.

Affected: Ubuntu:20.04:LTS: redis

It was discovered, that redis, a persistent key-value database, due to a packaging issue, is prone to a (Debian-specific) Lua sandbox escape, which could result in remote code execution.