A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.
Scoped product and version facts
Fix information unknown; no fixed version is derived here. Missing information does not prove that no fix exists.
Exploitation unknown; this catalogue does not assess exploitation.
PAScal
Vendor
PILZ
Product
PAScal
Platforms
Unknown
Default status
unaffected
PAScal · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
semver
Unavailable
1.9.1
None listed
PASconnect
Vendor
PILZ
Product
PASconnect
Platforms
Unknown
Default status
unaffected
PASconnect · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
semver
1.4.0
Unavailable
None listed
PASmotion
Vendor
PILZ
Product
PASmotion
Platforms
Unknown
Default status
unaffected
PASmotion · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
semver
1.4.1
Unavailable
None listed
PNOZmulti Configurator
Vendor
PILZ
Product
PNOZmulti Configurator
Platforms
Unknown
Default status
unaffected
PNOZmulti Configurator · Scoped product and version facts
Version (version)
Status (status)
Version scheme (versionType)
Exclusive end (lessThan)
Inclusive end (lessThanOrEqual)
Status changes (at → status)
1.0.0
affected
semver
11.2.0
Unavailable
None listed
PNOZmulti Configurator LTS
Vendor
PILZ
Product
PNOZmulti Configurator LTS
Platforms
Unknown
Default status
unaffected
PNOZmulti Configurator LTS · Scoped product and version facts