Approved changes feed: RSS · Atom

cpe:2.3:a:pilz:pmc:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPilz (efa93a46-4593-529f-a701-332c0383c39c)
ProductPmc (64affd67-ec6c-5233-bd2e-a90c2a72c6d4)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2020-12069 vulnerable 2026-06-03 14:41:33.241571 CODESYS V3 prone to Inadequate Password Hashing
HIGH (7.8)
In CODESYS V3 products in all versions prior V3.5.16.0 containing the CmpUserMgr, the CODESYS Control runtime system stores the online communication passwords using a weak hashing algorithm. This can be used by a local attacker with low privileges to gain full control of the device.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:17:54.368Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2020-12067 vulnerable 2026-06-03 14:41:33.230337 Details available
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), a user's password may be changed by an attacker without knowledge of the current password.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T16:18:59.304Z
Reference links
Imported from gcve-enriched-dumps CVE data
CVE:CVE-2019-9011 vulnerable 2026-06-03 14:40:48.609665 Details available
In Pilz PMC programming tool 3.x before 3.5.17 (based on CODESYS Development System), an attacker can identify valid usernames.
Published: 2022-12-26T00:00:00.000Z
Updated: 2025-04-14T17:04:22.274Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.