Osisoft Pi_data_archive
11 CVEs affecting Osisoft Pi_data_archive. Latest disclosed: 2020-07-25. Critical: 0, High: 7.
| CVE | Severity | Score | Published | Summary |
|---|---|---|---|---|
CVE-2020-10610 | High | 7.8 | 2020-07-24 | In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to… |
CVE-2020-10608 | High | 7.8 | 2020-07-24 | In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. Thi… |
CVE-2020-10606 | High | 7.8 | 2020-07-24 | In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation c… |
CVE-2018-7533 | High | 7.8 | 2018-03-14 | An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation o… |
CVE-2020-10604 | High | 7.5 | 2020-07-25 | In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted reques… |
CVE-2018-7529 | High | 7.5 | 2018-03-14 | A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data… |
CVE-2017-7930 | High | 7.4 | 2017-08-25 | An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Data Archive has protocol flaws with the p… |
CVE-2020-10600 | Medium | 5.9 | 2020-07-24 | An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to P… |
CVE-2018-7531 | Medium | 5.9 | 2018-03-14 | An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests… |
CVE-2017-7934 | Medium | 5.9 | 2017-08-25 | An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versi… |
CVE-2016-8365 | Medium | 5.5 | 2018-04-03 | OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Softwar… |