Summary
Successful exploitation of these vulnerabilities may allow disclosure of sensitive information and limit the availability of the system.
Vulnerabilities 4
-
Unscored —
In OSIsoft PI System multiple products and versions, a local attacker could view sensitive information in log files whe…
-
Unscored —
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to a cross-site request …
-
Unscored —
OSIsoft PI Vision, PI Vision 2017 R2 and PI Vision 2017 R2 SP1. The affected product is vulnerable to cross-site script…
-
Unscored —
OSIsoft PI Vision, All versions of PI Vision prior to 2019. The affected product is vulnerable to an improper access co…
Revision history
-
#1
ICSA-20-014-06 OSIsoft PI Vision
References
-
ICS Advisory ICSA-20-014-06 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-20-014-06
-
Recommended Practices
https://www.us-cert.gov/ncas/tips/ST04-014
-
Recommended Practices
https://www.us-cert.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://www.us-cert.gov/ics/tips/ICS-TIP-12-146-01B