Skip to content
OpenAdvisories
Medium VDE-2022-044 1 CVE

Pilz: Multiple products affected by ZipSlip

Published Nov 24, 2022 · Updated Jun 5, 2025 · Revision 2

Vendor: Pilz Product: PAScal Product: PASconnect Product: PASmotion Product: PNOZmulti Configurator Product: PNOZmulti Configurator LTS

Summary

Several Pilz software products do not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.

Details

Impact
The affected software products are using ZIP archives to save and load project backups and libraries. When loading a ZIP archive, the contained pathnames are not checked properly for relative path components. If a user loads a manipulated ZIP archive the vulnerability can be used to place potentially malicious files outside of the application's working directory. Depending on the user's privileges this can lead to code execution.

Remediation
Please visit the Pilz Shop (www.pilz.com/en-INT/eshop) to check for the fixed version

Vulnerabilities 1

  • Medium 5.5
    CVE-2022-40976

    PILZ: Multiple products affected by ZipSlip

    A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availabilit…

    Pilz PASconnect PNOZmulti Configurator PAS4000

Revision history

  1. #2

    Fix: quotation mark

  2. #1

    Initial revision.

References