Description
A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity and/or availability.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Pilz | PMI v8xx | 0.0.0 – ≤ 2.0.33992 | — |
| Pilz | PASvisu | 0.0.0 – < 1.14.1 | 1.14.1 |
Advisories 1
- VDE-2023-050 Pilz: Vulnerability in PASvisu and PMI v8xx CERT@VDE · Apr 10, 2025
References
- https://certvde.com/en/advisories/VDE-2023-050/ vendor-advisory