osisoft pi data archive 2018 vulnerabilities and exploits

(subscribe to this query)

5

CVSSv2

In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests. This can result in blocking connections and queries to PI Data Archive.

Osisoft Pi Data Archive 2018

7.1

CVSSv2

An Improper Input Validation issue exists in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server.

Osisoft Pi Data Archive Osisoft Pi Data Archive 2017

7.2

CVSSv2

An Incorrect Default Permissions issue exists in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system.

Osisoft Pi Data Archive 2017 Osisoft Pi Data Archive

7.8

CVSSv2

A Deserialization of Untrusted Data issue exists in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server.

Osisoft Pi Data Archive

4.9

CVSSv2

An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive (2018 SP2 and prior versions).

Osisoft Pi Data Archive

3.5

CVSSv2

In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive.

Pi Data Archive 2018

Get Started

Vulmon Search is a vulnerability search engine. It gives comprehensive vulnerability information through a very simple user interface.

Home Recent Vulnerabilities Research Posts Trends Blog About Contact

Vulmon Search Vulmon Research Vulmon Alerts Vulmap

Twitter Reddit Linkedin Facebook