CVE-2018-19009: High severity Pilz PNOZmulti Configurator vulnerability
Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device.
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2018-19009?
CVE-2018-19009 is classified as a medium-severity vulnerability that allows sensitive credential data to be exposed.
How do I fix CVE-2018-19009?
The recommended fix for CVE-2018-19009 is to upgrade the Pilz PNOZmulti Configurator software to version 10.9 or later.
Who is affected by CVE-2018-19009?
Users of Pilz PNOZmulti Configurator versions prior to 10.9 are affected by CVE-2018-19009.
What kind of data is exposed in CVE-2018-19009?
CVE-2018-19009 exposes sensitive credential data in clear-text, specifically applicable to the PMI m107 diag HMI device.
Can an attacker exploit CVE-2018-19009 remotely?
No, CVE-2018-19009 requires local access to the system to exploit the vulnerability.