Skip to content
OpenAdvisories

Vendor

Pilz

7 known vulnerabilities.

Products

PASvisu 3 PMI v8xx 2 Pilz PNOZmulti Configurator 1 PMI v5xx (265507 + 265512) 1 PMI v7xx (266704 + 266707) 1 PMI v8xx (266807, 266812, 266815) 1 PAScal 1 PASconnect 1 PASmotion 1 PNOZmulti Configurator 1 PNOZmulti Configurator LTS 1 PAS4000 1 IndustrialPI 4 with IndustrialPI webstatus 1 IndustrialPI 4 with Firmware Bullseye 1 PIT Transponder Manager 0 PNOZsigma Configurator 0 Software Live Video Server 0 Software PAS4000 0 Software PASvisu 0 Software PIT User Authentication Service 0 Software SafetyEYE Configurator 0 PASvisu Software 0 PMI v5xx 0 PMI v7xx 0 CODESYS DevSys 0 Live Video Server 0 PASloto 0 PNOZsigma 0 SafetyEYE 0 PIT User Authentication Service 0 PMIv7xxe 0 PMIv8xx 0 Firmware 0 Firmware PMI v70Xe 0 Firmware PMI v8 0 IndustrialPI 4 0 Bullseye 0 PiCtory 0 IndustrialPI webstatus 0 PIT gb RLLE y down ETH 0
All Critical High Medium Low Exploited only Public exploit

2 results · Clear filters · Feed

  • Critical 9.8
    CVE-2025-41648

    Pilz: Authentication Bypass in IndustrialPI Webstatus

    An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.

    Pilz IndustrialPI 4 with IndustrialPI webstatus
  • Critical 10.0
    CVE-2025-41656 Public exploit EPSS 12%

    Pilz: Missing Authentication in Node-RED integration

    An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server is not configured by default.

    Pilz IndustrialPI 4 with Firmware Bullseye