Vulnerability in Osisoft Pi Server

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.

Vulnerability class: POODLE (CVE-2014-3566)

EPSS: 0.007 (48.2th percentile) — read the EPSS interpretation.

Affected products

Osisoft Pi_server — versions 2.4, 2.6, 3.4.363.97
N/a — versions n/a

Weakness classification (CWE)

CWE-310 — Cryptographic Issues

References

cret@cert.org (mailing-list, x_refsource_BUGTRAQ)