Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 04:07.

Filters

1 active
Reset filters

1 advisories found

VDE-2022-044

Pilz: Multiple products affected by ZipSlip

Pilz — PAScal

Pilz PSIRTmiddel

Published

24 November 2022

Last update

5 June 2025

Linked CVEs

Affected sectors

Risk evaluation

Several Pilz software products do not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.

Mitigation summary

Please visit the Pilz Shop (www.pilz.com/en-INT/eshop) to check for the fixed version

Revision history (2)
  1. Initial publication — 24 November 2022

    Initial revision.

  2. Update A — 5 June 2025

    Fix: quotation mark

Official source: Pilz PSIRT