Описание
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.
Ссылки
- Third Party AdvisoryVDB Entry
- MitigationThird Party AdvisoryUS Government Resource
- Third Party AdvisoryVDB Entry
- MitigationThird Party AdvisoryUS Government Resource
Уязвимые конфигурации
Конфигурация 1Версия до 2017 (включая)
Одно из
cpe:2.3:a:osisoft:pi_web_api:*:*:*:*:*:*:*:*
cpe:2.3:a:osisoft:pi_web_api:2017:r2:*:*:*:*:*:*
Конфигурация 2
cpe:2.3:a:osisoft:pi_vision:2017:r2:*:*:*:*:*:*
EPSS
Процентиль: 64%
0.00474
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-264
NVD-CWE-noinfo
Связанные уязвимости
CVSS3: 9.8
github
больше 3 лет назад
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.
EPSS
Процентиль: 64%
0.00474
Низкий
9.8 Critical
CVSS3
7.5 High
CVSS2
Дефекты
CWE-264
NVD-CWE-noinfo