OSIsoft PI Web API
view advisory published 2021-11-09
Successful exploitation of this vulnerability could allow a remote authenticated attacker access to sensitive information or deliver false information.
01
describes (1)
Related CVEs.
| ID | severity | exploitable | ||
|---|---|---|---|---|
| CVE-2021-43549US | medium4.8 | — | ||
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a resul… | ||||
02
references
External citations — patches, advisories, analysis.
03
remediations (1)
- MitigationPI Web API
Audit the AF hierarchy to ensure there are no unauthorized databases, elements, or attributes
scry
Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.
Free scan