PatchTheCVEpilz vulnerabilities
Recent CVEs affecting pilz products. 5 tracked.
pilz has 5 tracked vulnerabilities, 0 critical. A fixed release or vendor patch exists for 5. Most recent: 2022-12-26. Highest priority: CVE-2022-40977 (score 46/100).
- CVE-2022-40977 HIGH 7.5 UPGRADE UPGRADE A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0
- CVE-2022-40976 MEDIUM 5.5 UPGRADE UPGRADE A path traversal vulnerability was discovered in multiple Pilz products
- CVE-2020-12069 HIGH 7.8 UPGRADE UPGRADE In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime
- CVE-2020-12067 HIGH 7.5 UPGRADE In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be
- CVE-2019-9011 MEDIUM 5.3 UPGRADE In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify
FAQ
How do I fix pilz vulnerabilities?
Open the CVE for your version, check the affected range, then follow the listed action: upgrade to the fixed release, or downgrade or mitigate if no fix exists yet. Commands for each OS are shown on every CVE page.
Is pilz being exploited right now?
None of the tracked pilz CVEs are on the CISA Known Exploited Vulnerabilities list at the moment. This is checked every 20 minutes.
Which pilz CVE should I patch first?
CVE-2022-40977 currently ranks highest (46/100): A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0.