OSIsoft PI Vision
view advisory published 2018-03-13
ATTENTION: Exploitable remotely/low skill level to exploit
01
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7504US | medium6.1 | — | ||
A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, allowing attempts at ref… | ||||
| CVE-2018-7496US | medium5.3 | — | ||
An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header and referrer-policy response header each provide unintended in… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (4)
- MitigationPI Vision
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00338 - MitigationPI Vision
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00338 - FixedPI Vision
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1. Obtain the update from OSIsoft.
- FixedPI Vision
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1. Obtain the update from OSIsoft.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan