← CVE Intelligence

CVE-2022-40976

PILZ: Multiple products affected by ZipSlip PUBLISHED

Description (CNA)

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

Affected (CNA)

Vendor / productVersions
PILZ / PAScalaffected 1.0.0 through 1.9.1
PILZ / PASconnectaffected 1.0.0 before 1.4.0
PILZ / PASmotionaffected 1.0.0 before 1.4.1
PILZ / PNOZmulti Configuratoraffected 1.0.0 before 11.2.0
PILZ / PNOZmulti Configurator LTSaffected 1.0.0 before 10.14.4
PILZ / PAS4000affected 1.0.0 before 1.25.0

CWE

CWE-22

References

ADP enrichment

CVE

No English description supplied.

CISA-ADP

No English description supplied.

No references supplied.