CVE-2022-40977 PILZ: PASvisu and PMI affected by ZipSlip
An unauthenticated remote attacker can write arbitrary files via a malicious zip file in PILZ PASvisu Server, compromising data integrity.
- Exploited in the wild
- Not known
- Login needed
- Not needed
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2022-40977?
CVE-2022-40977 is a high-severity path traversal vulnerability in PILZ PASvisu, published on 24 Nov 2022. An attacker can exploit it over the internet without logging in, with no action from the victim.
Official description
A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.
Weakness: CWE-22
Which versions are affected by CVE-2022-40977?
It affects 8 products.
Products include Pilz Pasvisu, Pilz Pmi V507 Firmware, Pilz Pmi V512 Firmware, Pilz Pmi V704e Firmware, Pilz Pmi V707e Firmware, Pilz Pmi V807 Firmware and 2 more.
How do I fix CVE-2022-40977?
No fix has been published for CVE-2022-40977 yet. Limit exposure of the affected software until one is available.
Upgrade, and resolve every user-supplied path against an allowed base folder before opening it. More about Path traversal.
Is CVE-2022-40977 being exploited?
There is no known exploitation of CVE-2022-40977 in the wild and no public exploit code.
Sources
Also known as GHSA-hjxv-pvv5-vqv2.