OSIsoft PI Web API
view advisory published 2018-03-13
ATTENTION: Exploitable remotely/low skill level to exploit.
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7508US | medium6.1 | — | ||
A Cross-site Scripting issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Cross-site scripting may occur when input is incorrectly neutralized. | ||||
| CVE-2018-7500US | critical9.8 | — | ||
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationPI Web API
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00336 - MitigationPI Web API
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00336 - FixedPI Web API
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1 or PI AF Services 2017 R2 Update 1, which both address the PI Web API vulnerabilities. OBtain the updates from OSIsoft.
- FixedPI Web API
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1 or PI AF Services 2017 R2 Update 1, which both address the PI Web API vulnerabilities. OBtain the updates from OSIsoft.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan