CVE-2022-40976

MediumCVSS 5.5/10Last modified Jun 17, 2026

Description

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

Metrics

CVSS 3.1 5.5/10CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:H/A:N

Weakness enumeration

CWE-22

Affected software

Vendor	Product	Versions
PILZ	PAScal	>= 1.0.0, <= 1.9.1
PILZ	PASconnect	>= 1.0.0, < 1.4.0
PILZ	PASmotion	>= 1.0.0, < 1.4.1
PILZ	PNOZmulti Configurator	>= 1.0.0, < 11.2.0
PILZ	PNOZmulti Configurator LTS	>= 1.0.0, < 10.14.4
PILZ	PAS4000	>= 1.0.0, < 1.25.0

References

https://cert.vde.com/en/advisories/VDE-2022-044/Vendor Advisory
https://cert.vde.com/en/advisories/VDE-2022-045/Vendor Advisory
https://cert.vde.com/en/advisories/VDE-2022-044/Vendor Advisory
https://cert.vde.com/en/advisories/VDE-2022-045/Vendor Advisory

Timeline

Published: Nov 24, 2022
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2022

CVE-2022-409777.5A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, m CVE-2022-409787.8The installer of JetBrains IntelliJ IDEA before 2022.2.2 was vulnerable to EXE search order hijacking CVE-2022-409795.3In JetBrains TeamCity before 2022.04.4 environmental variables of "password" type could be logged when using custom Perforce executable CVE-2022-40988.0Multiple Wiesemann&Theis products of the ComServer Series are prone to an authentication bypass through IP spoofing. After a user logged in CVE-2022-409809.1A potential unathenticated file deletion vulnerabilty on Trend Micro Mobile Security for Enterprise 9.8 SP5 could allow an attacker with acc CVE-2022-4098110.0All versions of ETIC Telecom Remote Access Server (RAS) 4.5.0 and prior is vulnerable to malicious file upload. An attacker could take advan CVE-2022-409826.5Information exposure through microarchitectural state after transient execution in certain vector execution units for some Intel(R) Processo CVE-2022-409838.8An integer overflow vulnerability exists in the QML QtScript Reflect API of Qt Project Qt 6.3.2. A specially-crafted javascript code can tri CVE-2022-409849.8Stack-based buffer overflow in WTViewerE series WTViewerE 761941 from 1.31 to 1.61 and WTViewerEfree from 1.01 to 1.52 allows an attacker to CVE-2022-409859.8Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 CVE-2022-409869.8Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210 CVE-2022-409879.8Several stack-based buffer overflow vulnerabilities exist in the DetranCLI command parsing functionality of Siretta QUARTZ-GOLD G5.0.1.5-210