OSIsoft PI Data Archive
Advisory ansehen veröffentlicht 2018-03-13
ATTENTION: Exploitable remotely/low skill level to exploit.
01
beschreibt (3)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2018-7533US | high7.8OT erhöht | — | ||
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that giv… | ||||
| CVE-2018-7531US | medium5.9 | — | ||
An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server. | ||||
| CVE-2018-7529US | high7.5 | — | ||
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom reque… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (3)
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
- MitigationPI Data Archive
OSIsoft recommends that customers upgrade to PI Data Archive 2017 R2. Obtain the update from OSIsoft.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan