Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI
Advisory ansehen veröffentlicht 2026-10-20
The 'piControl' kernel module used in the IndustrialPI, prior to version 2.8.0-1, contains multiple vulnerabilities. Successful exploitation of these vulnerabilities can lead to kernel memory corruption and denial of service.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2026-13198US | — | — | ||
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the event notification funct… | ||||
| CVE-2026-13197US | — | — | ||
Nozomi Networks Labs identified a CWE-362: Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition') vulnerability in the configuration and proces… | ||||
| CVE-2026-13196US | — | — | ||
Nozomi Networks Labs identified a CWE-787: Out-of-bounds Write vulnerability in the process-image management functionality of KUNBUS piControl in version 2.6.2 that allows a local… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
- PPSA-2026-004: Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI - HTMLself
- CERT@VDE Security Advisories for Pilz GmbH & Co. KGexternal
- PPSA-2026-004: Pilz: Vulnerabilities in 'piControl' kernel module for Industrial PC IndustrialPI - CSAFself
- For further security-related issues in Pilz products please contact the Pilz Product Security Incident Response Team (PSIRT)external
03
Behebungen (3)
- Behoben
Update package 'picontrol' to version 2.8.0-1 or higher.
- Behoben
Update package 'picontrol' to version 2.8.0-1 or higher.
- Behoben
Update package 'picontrol' to version 2.8.0-1 or higher.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan