OSIsoft PI Vision
Advisory ansehen veröffentlicht 2018-03-13
ATTENTION: Exploitable remotely/low skill level to exploit
01
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7504US | medium6.1 | — | ||
A Protection Mechanism Failure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The X-XSS-Protection response header is not set to block, allowing attempts at ref… | ||||
| CVE-2018-7496US | medium5.3 | — | ||
An Information Exposure issue was discovered in OSIsoft PI Vision versions 2017 and prior. The server response header and referrer-policy response header each provide unintended in… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- MitigationPI Vision
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00338 - MitigationPI Vision
OSIsoft has released the following alert
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00338 - BehobenPI Vision
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1. Obtain the update from OSIsoft.
- BehobenPI Vision
OSIsoft recommends that users upgrade to PI Vision 2017 R2 Update 1. Obtain the update from OSIsoft.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan