CVE-2023-45795 — Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx

CVE-2023-45795

Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx PUBLISHED

Description (CNA)

A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

Affected (CNA)

Vendor / product	Versions
Pilz / PMI v8xx	affected 0.0.0 through 2.0.33992
Pilz / PASvisu	affected 0.0.0 before 1.14.1

CWE

CWE-79

References

https://certvde.com/en/advisories/VDE-2023-050/

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.