VULNERABILITY INTELLIGENCE

CVE-2022-40977

CVSS score7.5 HIGH

EPSS probability0.92%

CISA KEVNot currently listed

Published2022-11-24

Last modified2026-06-17

Description

A path traversal vulnerability was discovered in Pilz PASvisu Server before 1.12.0. An unauthenticated remote attacker could use a zipped, malicious configuration file to trigger arbitrary file writes ('zip-slip'). File writes do not affect confidentiality or availability.