ICSA-20-315-01_OSIsoft PI Interface for OPC XML-DA
view advisory published 2020-11-10
OSIsoft reported this vulnerability to CISA.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2013-0006US | high9.3 | — | ||
Microsoft XML Core Services (aka MSXML) 3.0, 5.0, and 6.0 does not properly parse XML content, which allows remote attackers to execute arbitrary code via a crafted web page, aka "… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (2)
- MitigationPI Interface for OPC XML-DA
Security bulletin and access to security update is available on the OSIsoft customer portal (login required).
https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=000031534 - FixedPI Interface for OPC XML-DA
Upgrade to PI Interface for OPC XML-DA Version 1.7.3.x to remove this vulnerability.
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan