Pilz: Authentication Bypass in IndustrialPI Webstatus

Impact
An attacker can bypass the login to the web application making it possible to access and maliciously change all available settings of the IndustrialPI.

Remediation
Update the webstatus package to version 2.4.6 via the 'apt' package manager. Use 'sudo apt update && sudo apt upgrade -y' to pull and install all available updates for the IndustrialPI. To check the version of the webstatus package, use 'dpkg -l | grep revpi-webstatus'.; Limit network access to the IndustrialPI by using a firewall or similar measures.;