Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2023-45795

Pilz: XSS vulnerability in Pilz PASvisu and PMI v8xx

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
CERTVDE

Description

A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Pilz PMI v8xx

Default version status: unaffected

  • 0.0.0 to ≤ 2.0.33992affected

Pilz PASvisu

Default version status: unaffected

  • 0.0.0 to < 1.14.1affected

References