CVE-2018-19009

Pilz PNOZmulti Configurator prior to version 10.9 allows an authenticated attacker with local access to the system containing the PNOZmulti Configurator software to view sensitive credential data in clear-text. This sensitive data is applicable to only the PMI m107 diag HMI device. An attacker with access to this sensitive data and physical access to the PMI m107 diag can modify data on the HMI device.

• CWE-312
• CWE-312

• http://www.securityfocus.com/bid/106529Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-010-03Third Party Advisory, US Government Resource
• http://www.securityfocus.com/bid/106529Third Party Advisory, VDB Entry
• https://ics-cert.us-cert.gov/advisories/ICSA-19-010-03Third Party Advisory, US Government Resource

Published

Jan 25, 2019

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2018-19003GE Mark VIe, EX2100e, EX2100e_Reg, and LS2100e Versions 03.0…
• CVE-2018-19004LCDS Laquis SCADA prior to version 4.1.0.4150 allows out of …
• CVE-2018-19005Cscape, Version 9.80.75.3 SP3 and prior. An improper input v…
• CVE-2018-19006OSIsoft PI Vision, versions PI Vision 2017, and PI Vision 20…
• CVE-2018-19007In Geutebrueck GmbH E2 Camera Series versions prior to 1.12.…
• CVE-2018-19008The TextEditor 2.0 in ABB CP400 Panel Builder versions 2.0.7…
• CVE-2018-1901IBM WebSphere Application Server 8.5 and 9.0 could allow a r…5
• CVE-2018-19010Drager Infinity Delta, Infinity Delta, all versions, Delta X…
• CVE-2018-19011CX-Supervisor (Versions 3.42 and prior) can execute code tha…
• CVE-2018-19012Drager Infinity Delta, Infinity Delta, all versions, Delta X…
• CVE-2018-19013An attacker could inject commands to delete files and/or del…
• CVE-2018-19014Drager Infinity Delta, Infinity Delta, all versions, Delta X…