Description
A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| PILZ | PAScal | 1.0.0 – ≤ 1.9.1 | — |
| PILZ | PASconnect | 1.0.0 – < 1.4.0 | 1.4.0 |
| PILZ | PASmotion | 1.0.0 – < 1.4.1 | 1.4.1 |
| PILZ | PNOZmulti Configurator | 1.0.0 – < 11.2.0 | 11.2.0 |
| PILZ | PNOZmulti Configurator LTS | 1.0.0 – < 10.14.4 | 10.14.4 |
| PILZ | PAS4000 | 1.0.0 – < 1.25.0 | 1.25.0 |
Advisories 2
- VDE-2022-044 Pilz: Multiple products affected by ZipSlip CERT@VDE · Jun 5, 2025
- VDE-2022-045 Pilz: PAS 4000 prone to ZipSlip CERT@VDE · May 22, 2025