CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:07.

Filters

1 active

Reset filters

Search: VDE-2022-033

Vendor

Protocol

Sector

Severity

Source

1 advisories found

VDE-2022-033

Pilz: PASvisu and PMI affected by multiple vulnerabilities

Pilz — PASvisu Software

Pilz PSIRThigh

Published

24 November 2022

Last update

24 November 2022

Linked CVEs

CVE-2022-40977 CVE-2022-25299

Affected sectors

Risk evaluation

PASvisu is an HMI solution for Machine Visualization. It is available as a standalone software product, but it is also included in various models of the PMI product family. The PASvisu Server component contains multiple vulnerabilities which can be utilised to write arbitrary files, potentially leading to code execution.

Mitigation summary

PASvisu software, PMI v7xx, PMI v8xx: Configure an administration password. PASvisu, PMI v7xx, PMI v8xx: Install the fixed version as soon as it is available. Please visit the Pilz Shop (www.pilz.com/enINT/eshop) to check for a fixed version.

Revision history (1)

Initial publication — 24 November 2022
Initial revision.

Official source: Pilz PSIRT