OSIsoft PI Vision
Successful exploitation of these vulnerabilities may allow a remote attacker with write access to the PI ProcessBook files to inject code that is imported into PI Vision, or disclose information to a user with insufficient privileges.
beschreibt (2)
Zugehörige CVEs.
| ID | Schweregrad | ausnutzbar | ||
|---|---|---|---|---|
| CVE-2020-25167US | medium6.5OT erhöht | — | ||
OSIsoft PI Vision 2020 versions prior to 3.5.0 could disclose information to a user with insufficient privileges for an AF attribute. | ||||
| CVE-2020-25163US | high7.3 | — | ||
A remote attacker with write access to PI ProcessBook files could inject code that is imported into OSIsoft PI Vision 2020 versions prior to 3.5.0. Unauthorized information disclos… | ||||
Referenzen
Externe Belege — Patches, Meldungen, Analysen.
Behebungen (4)
- MitigationPI Vision 2020
Recommended defensive measures and related configuration settings are described on the OSIsoft customer portal (Login required).
https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=000031533 - MitigationPI Vision 2020
Recommended defensive measures and related configuration settings are described on the OSIsoft customer portal (Login required).
https://customers.osisoft.com/s/knowledgearticle?knowledgeArticleUrl=000031533 - BehobenPI Vision 2020
OSIsoft released PI Vision 2020 Version 3.5.0, which resolves these vulnerabilities.
- BehobenPI Vision 2020
OSIsoft released PI Vision 2020 Version 3.5.0, which resolves these vulnerabilities.
Advisories wie diese benennen die exponierten Produkte, die Angreifer auf Ihrer Angriffsfläche ins Visier nehmen. Sehen Sie mit einem kostenlosen Passiv-Scan, was exponiert ist.
Kostenloser Scan