CVSS 3.1
7.5 highCVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:NCVE-2022-40977
A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.
Severity
- EPSS
- 0.9% chance of exploitation in the next 30 days; higher than 61% of CVEs (scores of 2026-10-31)
- CWE
- CWE-22
- Published
- Modified
- Record from
- the NVD, synced
Affected
- pilz:pasvisu
- pilz:pmi_v507_firmware
- pilz:pmi_v512_firmware
- pilz:pmi_v704e_firmware
- pilz:pmi_v707e_firmware
- pilz:pmi_v807_firmware
- pilz:pmi_v812_firmware
- pilz:pmi_v815_firmware