OSIsoft PI System Incomplete Model of Endpoint Features Vulnerability

Vulnerabilities 1

• Unscored —
  CVE-2016-8365

  OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Vers…

  OSIsoft PI System software
  Apr 3, 2018

Revision history

1. 2025-06-05 #2

   Advisory converted into a CSAF

2. 2016-08-12 #1

   Initial Publication

References

• ICS Advisory ICSA-16-313-03 - Web Version
  https://www.cisa.gov/news-events/ics-advisories/icsa-16-313-03
• Recommended Practices
  https://www.cisa.gov/uscert/ics/alerts/ICS-ALERT-10-301-01
• Recommended Practices
  https://www.cisa.gov/resources-tools/resources/ics-recommended-practices
• Recommended Practices
  https://www.cisa.gov/topics/industrial-control-systems
• Recommended Practices
  https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
• Recommended Practices
  https://www.cisa.gov/sites/default/files/publications/Cybersecurity_Best_Practices_for_Industrial_Control_Systems.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ics/tips/ICS-TIP-12-146-01B
• Recommended Practices
  https://www.cisa.gov/uscert/sites/default/files/publications/emailscams0905.pdf
• Recommended Practices
  https://www.cisa.gov/uscert/ncas/tips/ST04-014