CVE:CVE-2022-40977
CNNVD:CNNVD-202211-3443
Pilz PASvisu是德国皮尔磁（Pilz）公司的一款用于机器可视化的 HMI 解决方案。
Pilz PASvisu 存在路径遍历漏洞。未经身份验证的远程攻击者可以使用压缩的恶意配置文件来触发任意文件写入。
solution:Upgrade pilz pasvisu to a higher version than 1.12.0,and avoid the version (,1.12.0); Upgrade pilz pmi_v507_firmware to a higher version than 1.3.58,and avoid the version (,1.3.58]; Upgrade pilz pmi_v512_firmware to a higher version than 1.3.58,and avoid the version (,1.3.58]; Upgrade pilz pmi_v704e_firmware to a higher version than 2.2.0,and avoid the version (,2.2.0); Upgrade pilz pmi_v707e_firmware to a higher version than 2.2.0,and avoid the version (,2.2.0); Upgrade pilz pmi_v807_firmware to a higher version than 1.6.102,and avoid the version (,1.6.102); Upgrade pilz pmi_v812_firmware to a higher version than 1.6.102,and avoid the version (,1.6.102); Upgrade pilz pmi_v815_firmware to a higher version than 1.6.102,and avoid the version (,1.6.102)