PatchTheCVEpmc vulnerabilities and fixes
Recent CVEs affecting pmc, with upgrade or downgrade steps. 3 tracked.
pmc has 3 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 3. Most recent: 2022-12-26. Highest priority: CVE-2020-12067 (score 43/100).
- CVE-2020-12069 HIGH 7.8 UPGRADE UPGRADE In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime
- CVE-2020-12067 HIGH 7.5 UPGRADE In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be
- CVE-2019-9011 MEDIUM 5.3 UPGRADE In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify
FAQ
How do I fix pmc vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pmc being exploited right now?
None of the tracked pmc CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pmc CVE should I patch first?
CVE-2020-12067 currently ranks highest (43/100): In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be.