Pilz
10 CVEs across 32 Pilz products. Browse Pilz vulnerabilities, severities, and proof-of-concept exploits.
Pilz products with known CVEs
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2023-45796 | High | 8.1 | 2026-06-22 | A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-priv… |
CVE-2023-45795 | High | 7.8 | 2026-06-22 | A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascr… |
CVE-2025-41656 | Critical | 10.0 | 2025-07-01 | An unauthenticated remote attacker can run arbitrary commands on the affected devices with high privileges because the authentication for the Node_RED server i… |
CVE-2025-41648 | Critical | 9.8 | 2025-07-01 | An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available se… |
CVE-2019-9011 | Medium | 5.3 | 2022-12-26 | In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames. |
CVE-2020-12069 | High | 7.8 | 2022-12-26 | In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords… |
CVE-2020-12067 | High | 7.5 | 2022-12-26 | In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the… |
CVE-2022-40977 | High | 7.5 | 2022-11-24 | A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configurat… |
CVE-2022-40976 | Medium | 5.5 | 2022-11-24 | A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to… |
CVE-2018-19009 | High | 7.8 | 2019-01-25 | Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator softwa… |