Pilz: Vulnerability affecting PASvisu Runtime
The PASvisu Runtime is affected by a vulnerability in a third-party component which can be exploited by a malicious web request.
beschreibt (1)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2025-51495US | — | Exploit | ||
An integer overflow vulnerability exists in the WebSocket component of Mongoose 7.5 thru 7.17. By sending a specially crafted WebSocket request, an attacker can cause the applicati… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- PPSA-2025-004: Pilz: Vulnerability affecting PASvisu Runtime - HTMLself
- CERT@VDE Security Advisories for Pilz GmbH & Co. KGexternal
- PPSA-2025-004: Pilz: Vulnerability affecting PASvisu Runtime - CSAFself
- For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)external
Behebungen (6)
- MitigationPASvisu
Limit network access to PASvisu server by using a firewall, a host-based firewall or similar measures.
- MitigationPASvisu <=1.15.0 installed on Firmware PMI v70Xe <=03.00.00 installed on PMIv7xxe
Limit network access to PASvisu server by using a firewall, a host-based firewall or similar measures.
- MitigationPASvisu <=1.15.0 installed on Firmware PMI v8 <=2.2.1 installed on PMIv8xx
Limit network access to PASvisu server by using a firewall, a host-based firewall or similar measures.
- BehobenPASvisu
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new version 'PASvisu 1.15.1' on to your device.
- BehobenPASvisu <=1.15.0 installed on Firmware PMI v70Xe <=03.00.00 installed on PMIv7xxe
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and install the new firmware image 'Firmware PMI v70Xe (visu 1.15.1) 03.01.00' on to your device.
- BehobenPASvisu <=1.15.0 installed on Firmware PMI v8 <=2.2.1 installed on PMIv8xx
Please visit the Pilz website (https://www.pilz.com/en-INT/search) and download 'Firmware PMI v8 Assistant (visu 1.15.1) 2.2.2' in order to install the new verison of the firmware on to your device.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan