Direct naar inhoud
IACS RadarIndustrial Cyber Exposure & Intelligence

CISA + leveranciers

ICS Advisories

Advisories specifiek gericht op industriële besturingssystemen — van CISA ICS-CERT en rechtstreeks van leveranciers (onder meer Siemens, ABB, Schneider Electric, WAGO en Phoenix Contact) — inclusief revisiegeschiedenis (initiële publicatie, Update A, Update B) en gekoppelde CVE's.

1

Gevonden

Advisorydata: live koppeling— laatst opgehaald: 7 november 2026 om 02:05.

Filters

1 actief
Reset filters

1 advisories gevonden

VDE-2023-033

Pilz: WIBU Vulnerabilitiy in multiple Products

Pilz — PASloto

Pilz PSIRTkritiek

Gepubliceerd

12 oktober 2023

Laatste update

22 mei 2025

Gekoppelde CVE's

Getroffen sectoren

Risk evaluation

Several Pilz products use the 3rd party component "CodeMeter Runtime" from WIBU-SYSTEM AG to manage software licenses. This component is affected by a vulnerability, which may enable an attacker to gain full control over the system running the software product. The vulnerability can be exploited locally or over the network. Update A, 2023-12-05 changed affected version of "Software PASvisu < 1.15.0" to "Software PASvisu < 1.14.1" removed CVE-2023-4701 because it was revoked.

Mitigatiesamenvatting

PAS4000, PASvisu, PIT User Authentication Service, PNOZsigma Configurator, PMIv8: Installthe fixed version as soon as it is available. Please visit the Pilz eShop(https://www.pilz.com/en-INT/eshop) to check for the fixed version. PASloto, Live Video Server, SafetyEYE Configurator, PMC programming tool: These productsare end-of-live, please follow the general countermeasures.

Revisiegeschiedenis (3)
  1. Initiële publicatie — 12 oktober 2023

    Initial revision.

  2. Update A — 5 december 2023

    Update A

  3. Update B — 22 mei 2025

    Fix: quotation mark

Officiële bron: Pilz PSIRT