CVE-2017-9653

Опубликовано: 14 авг. 2017

Источник: nvd

CVSS3: 9.8

CVSS2: 7.5

EPSS Низкий

Описание

An Improper Authorization issue was discovered in OSIsoft PI Integrator for Business Analytics before 2016 R2, PI Integrator for Microsoft Azure before 2016 R2 SP1, and PI Integrator for SAP HANA before 2017. An attacker is able to gain privileged access to the system while unauthorized.

Ссылки

http://www.securityfocus.com/bid/100212
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01
Mitigation
Third Party Advisory
US Government Resource
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324
Vendor Advisory
http://www.securityfocus.com/bid/100212
Third Party Advisory
VDB Entry
https://ics-cert.us-cert.gov/advisories/ICSA-17-220-01
Mitigation
Third Party Advisory
US Government Resource
https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00324
Vendor Advisory

Уязвимые конфигурации

Конфигурация 1

Одно из

cpe:2.3:a:osisoft:pi_integrator_for_business_analystics:2016:*:*:*:*:*:*:*

cpe:2.3:a:osisoft:pi_integrator_for_microsoft_azure:2016:*:*:*:*:*:*:*

cpe:2.3:a:osisoft:pi_integrator_for_sap_hana:2016:*:*:*:*:*:*:*

EPSS

Процентиль: 80%

0.01323

Низкий

9.8 Critical

CVSS3

7.5 High

CVSS2

Дефекты

CWE-863

Связанные уязвимости

GHSA-4xvh-24fg-v9xx