Skip to content
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + vendors

ICS Advisories

Advisories specifically aimed at industrial control systems — from CISA ICS-CERT and directly from vendors (including Siemens, ABB, Schneider Electric, WAGO and Phoenix Contact) — including revision history (initial publication, Update A, Update B) and linked CVEs.

1

Found

Advisory data: live connection— last retrieved: 7 November 2026 at 03:37.

Filters

1 active
Reset filters

1 advisories found

VDE-2022-045

Pilz: PAS 4000 prone to ZipSlip

Pilz — PAS4000

Pilz PSIRTmiddel

Published

24 November 2022

Last update

22 May 2025

Affected sectors

Risk evaluation

PAS4000 is the software platform for the Automation System PSS 4000. PAS 4000 does not properly check pathnames contained in archives. An attacker can utilise this vulnerability to write arbitrary files, potentially leading to code execution.

Mitigation summary

Install the fixed version as soon as it is available. Please visit the Pilz Shop (www.pilz.com/en-INT/eshop) to check for the fixed version

Revision history (2)
  1. Initial publication — 24 November 2022

    Initial revision.

  2. Update A — 22 May 2025

    Fix: quotation mark

Official source: Pilz PSIRT