OSIsoft PI Web API 2017
view advisory published 2017-06-13
ATTENTION: Remotely exploitable/low skill level to exploit.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2017-7926US | high8.8 | — | ||
A Cross-Site Request Forgery issue was discovered in OSIsoft PI Web API versions prior to 2017 (1.9.0). The vulnerability allows cross-site request forgery (CSRF) attacks to occur… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationPI Web API
Please see alert AL00316 on the OSIsoft web page for more information about this issue
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00316 - FixedPI Web API
A new installation of PI Web API 2017 (1.9.0) enables CSRF protection by default.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan