Riskcovery

CVE-2018-19009

State
Published
Severity
Not scored
Published
Jan 25, 2019
Updated
Sep 16, 2024
Reserved
Nov 6, 2018

Read the record on cve.org

Description

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device.

Scores

The record has no CVSS score.

Weaknesses

  • CWE-312 CLEARTEXT STORAGE OF SENSITIVE INFORMATION CWE-312

Affected Products

ProductVersions
Pilz PNOZmulti ConfiguratorPilz
  • All versions prior to version 10.9Affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.