OSIsoft PI Vision
Successful exploitation of these vulnerabilities may allow a remote attacker with write access to the PI ProcessBook files to inject code that is imported into PI Vision, or disclose information to a user with insufficient privileges.
describes (2)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2020-25167US | medium6.5OT elevated | — | ||
OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. | ||||
| CVE-2020-25163US | high7.3 | — | ||
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclos… | ||||
references
External citations — patches, advisories, analysis.
remediations (4)
- MitigationPI Vision 2020
Recommended defensive measures and related configuration settings are described on the OSIsoft customer portal (Login required).
https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=000031533 - MitigationPI Vision 2020
Recommended defensive measures and related configuration settings are described on the OSIsoft customer portal (Login required).
https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=000031533 - FixedPI Vision 2020
OSIsoft released PI Vision 2020 Version 3.5.0, which resolves these vulnerabilities.
- FixedPI Vision 2020
OSIsoft released PI Vision 2020 Version 3.5.0, which resolves these vulnerabilities.
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan