Pilz Pmc vulnerabilities

3 vulnerabilities

Known vulnerabilities in Pilz Pmc, newest first, with CVSS severity, EPSS, KEV listings, ransomware use and the affected versions.

7.8CVE-2020-12069codesyscodesys v3 containing the cmpusermgr+64
EPSS score
0.17%
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.7.5CVE-2020-12067pilzpmc
EPSS score
0.52%
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.5.3CVE-2019-9011pilzpmc
EPSS score
0.46%
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.