Approved changes feed: RSS · Atom

cpe:2.3:a:pilz:industrialpi_4_with_industrialpi_webstatus:*:*:*:*:*:*:*:*

part: a version: * update: *

VendorPilz (efa93a46-4593-529f-a701-332c0383c39c)
ProductIndustrialpi 4 With Industrialpi Webstatus (6f11c684-ce72-5667-8c9b-fbc1a96f7fe7)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from gcve-enriched-dumps CVE data

PURL mappings

PURLSourceLast updated
No PURL mappings for this CPE yet.

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2025-41648 vulnerable 2026-06-08 07:25:07.084049 Pilz: Authentication Bypass in IndustrialPI Webstatus
CRITICAL (9.8)
An unauthenticated remote attacker can bypass the login to the web application of the affected devices making it possible to access and change all available settings of the IndustrialPI.
Published: 2025-07-01T08:10:24.679Z
Updated: 2025-07-02T13:24:37.115Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.