OSIsoft PI Vision
Advisory ansehen veröffentlicht 2020-01-14
Successful exploitation of these vulnerabilities may allow disclosure of sensitive information and limit the availability of the system.
01
beschreibt (4)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2019-18275US | medium6.5 | — | ||
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access control, which may return unauthorized tag data when viewing an… | ||||
| CVE-2019-18273US | medium4.8 | — | ||
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site scripting, which may allow invalid input to be introduced. | ||||
| CVE-2019-18271US | high8.8 | — | ||
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request forgery that may be introduced on the PI Vision administratio… | ||||
| CVE-2019-18244US | medium4.7 | — | ||
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files when service accounts are customized during installation or upgr… | ||||
02
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
03
Behebungen (4)
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
- MitigationPI Vision
OSIsoft recommends users upgrade to PI Vision 2019 to resolve these issues.
scry
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan