Buffer overflow in Osisoft Pi Interface

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service (instance shutdown and data-collection outage) via crafted C37.118 configuration packets that trigger an invalid read operation.

Vulnerability class: Buffer Overflow

EPSS: 0.014 (68.8th percentile) — read the EPSS interpretation.

Affected products

Osisoft Pi_interface — versions 1.0.1.3, 1.0.2.0, 1.0.3.0
N/a — versions n/a

Weakness classification (CWE)

CWE-119 — Improper Restriction of Operations within the Bounds of a Memory Buffer

References

ics-cert@hq.dhs.gov (US Government Resource, x_refsource_MISC)