CVE Feed

    Dashboard / CVE / CVE-2022-40977

    CVE-2022-40977

    A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

    Published:Nov 24, 2022
    Last Modified:Apr 24, 2025
    EPS:Nov 24, 2022
    EPSS Score:0.00143
    CVSS Score:7.5

    Affected Products

    Vendor
    Pilz
    Product
    Pasvisu
    Vendor
    Pilz
    Product
    Pmi V507
    Vendor
    Pilz
    Product
    Pmi V507 Firmware
    Vendor
    Pilz
    Product
    Pmi V512
    Vendor
    Pilz
    Product
    Pmi V512 Firmware
    Vendor
    Pilz
    Product
    Pmi V704e
    Vendor
    Pilz
    Product
    Pmi V704e Firmware
    Vendor
    Pilz
    Product
    Pmi V707e
    Vendor
    Pilz
    Product
    Pmi V707e Firmware
    Vendor
    Pilz
    Product
    Pmi V807
    Vendor
    Pilz
    Product
    Pmi V807 Firmware
    Vendor
    Pilz
    Product
    Pmi V812
    Vendor
    Pilz
    Product
    Pmi V812 Firmware
    Vendor
    Pilz
    Product
    Pmi V815
    Vendor
    Pilz
    Product
    Pmi V815 Firmware

    Exploits

    No exploit reference

    Common Vulnerability Scoring System

    Attack Vector
    Network
    Adjacent
    Local
    Physical
    Privileges Required
    None
    Low
    High
    User Interaction
    None
    Required
    Scope
    Unchanged
    Changed
    Confidentiality
    None
    Low
    High
    Integrity
    None
    Low
    High
    Availability
    None
    Low
    High