ICSA-17-010-01A

icsaUScisa_csaf_ot

OSIsoft PI Coresight and PI Web API (Update A)

view advisory published 2017-01-10

Vendor: OSIsoft

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2017-5153UShigh7.8—
An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An infor…
02

references

External citations — patches, advisories, analysis.

03

remediations (4)

  • MitigationPI Coresight

    OSIsoft recommends that users follow the workaround detailed in the security bulletin until a software update can be applied. The security bulletin with detailed workaround can be found at:

    https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00312
  • MitigationPI Web API

    OSIsoft recommends that users follow the workaround detailed in the security bulletin until a software update can be applied. The security bulletin with detailed workaround can be found at:

    https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00312
  • FixedPI Coresight

    OSIsoft has released new versions of PI Vision 2017, PI Web API 2017, and PI AF Services 2017 SP1 install kit. These new versions address this issue for PI Coresight, PI Web API, and the PI AF Services integrated install kit.

  • FixedPI Web API

    OSIsoft has released new versions of PI Vision 2017, PI Web API 2017, and PI AF Services 2017 SP1 install kit. These new versions address this issue for PI Coresight, PI Web API, and the PI AF Services integrated install kit.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan