CVE-2022-40976

Description

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

Affected Platforms

Weakness Type

CWE-22, CWE-22

References

• https://cert.vde.com/en/advisories/VDE-2022-044/
• https://cert.vde.com/en/advisories/VDE-2022-045/
• https://cert.vde.com/en/advisories/VDE-2022-044/
• https://cert.vde.com/en/advisories/VDE-2022-045/