Pilz Pasvisu vulnerabilities

3 vulnerabilities

Known vulnerabilities in Pilz Pasvisu, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.5CVE-2022-40977pilzpasvisu+10
EPSS score
0.92%
A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.8.1CVE-2023-45796pilzpasvisu+1
EPSS score
0.63%
A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.7.8CVE-2023-45795pilzpasvisu+1
EPSS score
0.21%
A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.