VYPR
← All advisories
High severity7.5NVD Advisory· Published Nov 24, 2022· Updated Jun 17, 2026

CVE-2022-40977

CVE-2022-40977

Description

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

13
  • Pilz/PASvisu2 versions
    cpe:2.3:a:pilz:pasvisu:*:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:pilz:pasvisu:*:*:*:*:*:*:*:*range: <1.12.0
    • (no CPE)range: 1.0.0
  • Pilz/Pmi V507 Firmware
    cpe:2.3:o:pilz:pmi_v507_firmware:*:*:*:*:*:*:*:*
    Range: <=1.3.58
  • Pilz/Pmi V512 Firmware
    cpe:2.3:o:pilz:pmi_v512_firmware:*:*:*:*:*:*:*:*
    Range: <=1.3.58
  • Pilz/Pmi V704e Firmware
    cpe:2.3:o:pilz:pmi_v704e_firmware:*:*:*:*:*:*:*:*
    Range: <2.2.0
  • Pilz/Pmi V707e Firmware
    cpe:2.3:o:pilz:pmi_v707e_firmware:*:*:*:*:*:*:*:*
    Range: <2.2.0
  • Pilz/Pmi V807 Firmware
    cpe:2.3:o:pilz:pmi_v807_firmware:*:*:*:*:*:*:*:*
    Range: <1.6.102
  • Pilz/Pmi V812 Firmware
    cpe:2.3:o:pilz:pmi_v812_firmware:*:*:*:*:*:*:*:*
    Range: <1.6.102
  • Pilz/Pmi V815 Firmware
    cpe:2.3:o:pilz:pmi_v815_firmware:*:*:*:*:*:*:*:*
    Range: <1.6.102
  • Pilz/PASvisu Serverllm-fuzzy
    Range: <1.12.0
  • PILZ/PMI v5xx (265507 + 265512)v5
    Range: 1.0.0
  • PILZ/PMI v7xx (266704 + 266707)v5
    Range: 1.0.0
  • PILZ/PMI v8xx (266807, 266812, 266815)v5
    Range: 1.0.0

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.