PASvisu vulnerabilities

3 known vulnerabilities in PASvisu from Pilz. 3 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 8.1 High severity

  PMI v8xx: Improper Neutralization of Input During Web Page Generation

  CVE-2023-45796Jun 22, 2026Pilz

  A stored cross-site scripting vulnerability in the Runtime component of Pilz PASvisu before 1.14.1 and PMI v8xx up to and including 2.0.33992 allows a low-privileged remote unauthenticated attacker to manipulate process data with potential impact on integrity

• 7.8 High severity

  PMI v8xx: Improper Neutralization of Input During Web Page Generation

  CVE-2023-45795Jun 22, 2026Pilz

  A cross-site scripting vulnerability in the Builder Component of Pilz PASvisu before 1.14.1 allows a local unauthenticated attacker to inject malicious javascript and gain full control over the device.

• 7.5 High severity

  PASvisu: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2022-40977Nov 24, 2022Pilz

  A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or