PT-2022-8310 · Pilz · Pilz Pmc Programming Tool

Published 2022-12-26 · Updated 2023-01-05 · CVE-2019-9011

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N

Name of the Vulnerable Software and Affected Versions Pilz PMC programming tool versions 3.x before 3.5.17

Description An issue in the Pilz PMC programming tool allows an attacker to identify valid usernames.

Recommendations For versions prior to 3.5.17, update to version 3.5.17 or later to resolve the issue.

Fix

Exposure of Resource to Wrong Sphere

Weakness Enumeration

CWE-668

Related Identifiers

CVE-2019-9011

Affected Products

Pilz Pmc Programming Tool

References · 5

• https://nvd.nist.gov/vuln/detail/CVE-2019-9011 · Security Note
• https://osv.dev/vulnerability/CVE-2019-9011 · Vendor Advisory
• https://cert.vde.com/en/advisories/VDE-2021-061 · Note
• https://t.me/cvenotify/40732 · Telegram Post
• https://t.me/cibsecurity/55364 · Telegram Post