Summary
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.
Details
Impact
A successful attack leads to a loss of availability of the affected Pilz products. For the products to be operational again, a manual restart is required.
Mitigation
Limit network access to PASvisu server by using a firewall, a host-based firewall or similar measures.
Remediation
- PASvisu: Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'PASvisu 1.15.1' on to your device.
- PMIv7xxe: Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new firmware image 'Firmware PMI v70Xe (visu 1.15.1) 03.01.00' on to your device.
- PMIv8xx: Please visit the Pilz website (https://www.pilz.com/en-INT/search) and download 'Firmware PMI v8 Assistant (visu 1.15.1) 2.2.2' in order to install the new verison of the firmware on to your device. ;
Vulnerabilities 1
-
High 7.5CVE-2025-51495 Public exploit
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially c…
Revision history
-
#1.0.0
Initial Version
References
-
For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)
https://www.pilz.com/security
-
CERT@VDE Security Advisories for Pilz GmbH & Co. KG
https://certvde.com/en/advisories/vendor/pilz/
-
PPSA-2025-004: Pilz: Vulnerability affecting PASvisu Runtime - HTML
https://certvde.com/en/advisories/PPSA-2025-004