Security Advisory

CVE-2022-40976

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2022-11-24 09:19:54

Last updated 2025-04-25 17:56:03

Assigner CERTVDE

CVSS score 5.5

State PUBLISHED

Description

A path traversal vulnerability was discovered in multiple Pilz products. An unauthenticated local attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.

← Browse all CVEs View on cve.org ↗