OSIsoft PI Data Archive
view advisory published 2018-03-13
ATTENTION: Exploitable remotely/low skill level to exploit.
01
describes (3)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2018-7533US | high7.8OT elevated | — | ||
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that giv… | ||||
| CVE-2018-7531US | medium5.9 | — | ||
An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server. | ||||
| CVE-2018-7529US | high7.5 | — | ||
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom reque… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (3)
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan