Pilz: Authentication Bypass in IndustrialPI Webstatus

An attacker on your network could access the IndustrialPI webstatus interface without credentials, potentially viewing sensitive process data or making unauthorized changes to equipment configuration.

Manufacturing facilities and industrial operations using Pilz IndustrialPI 4 systems for process monitoring and control should prioritize this update. Particularly critical for organizations where the webstatus interface is exposed to untrusted networks or used for remote monitoring of production equipment.

An attacker with network access to the IndustrialPI would connect to the webstatus application port and bypass the authentication mechanism due to insufficient login verification. No valid credentials would be required to gain access to the web interface.