Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service
**PIT User Authentication Service is part of the operating mode selection and access permission system PITmode.** The PIT User Authentication Service is affected by multiple vulnerabilities in included third-party components.
describes (4)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2025-12383US | high7.4 | — | ||
In Eclipse Jersey versions 2.45, 3.0.16, 3.1.9 a race condition can cause ignoring of critical SSL configurations - such as mutual authentication, custom key/trust stores, and othe… | ||||
| CVE-2025-61795US | — | — | ||
Improper Resource Shutdown or Release vulnerability in Apache Tomcat.
If an error occurred (including exceeding limits) during the processing of a multipart upload, temporary copi… | ||||
| CVE-2025-48988US | — | Exploit | ||
Allocation of Resources Without Limits or Throttling vulnerability in Apache Tomcat.
This issue affects Apache Tomcat: from 11.0.0-M1 through 11.0.7, from 10.1.0-M1 through 10.1.4… | ||||
| CVE-2025-31650US | high7.5 | Exploit | ||
Improper Input Validation vulnerability in Apache Tomcat. Incorrect error handling for some invalid HTTP priority headers resulted in incomplete clean-up of the failed request whic… | ||||
references
External citations — patches, advisories, analysis.
- PPSA-2026-001: Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service - HTMLself
- CERT@VDE Security Advisories for Pilz GmbH & Co. KGexternal
- PPSA-2026-001: Pilz: Multiple Vulnerabilities affecting the PIT User Authentication Service - CSAFself
- For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)external
remediations (16)
- MitigationPIT User Authentication Service
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service 1.4.0
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service 1.4.0
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service 1.4.0
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- MitigationPIT User Authentication Service 1.4.0
Limit network access to the PITreader and PIT User Authentication Service by using a firewall, a host-based firewall or similar measures.
- FixedPIT User Authentication Service
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service 1.4.0
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service 1.4.0
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service 1.4.0
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
- FixedPIT User Authentication Service 1.4.0
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'Software PIT User Auth. Service 1.4.1' on to your device.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan