Summary
Successful exploitation of this vulnerability could allow a remote authenticated attacker access to sensitive information or deliver false information.
Vulnerabilities 1
-
Medium 6.9
OSIsoft PI Web API
A remote authenticated attacker with write access to a PI Server could trick a user into interacting with a PI Web API endpoint and redirect them to a malicious website. As a result, a victim may disclose sensitive information to the attacker or be provided w…
Revision history
-
#1
ICSA-21-313-06 OSIsoft PI Web API
References
-
ICS Advisory ICSA-21-313-06 Web Version
https://www.cisa.gov/news-events/ics-advisories/icsa-21-313-06
-
Recommended Practices
https://us-cert.cisa.gov/sites/default/files/recommended_practices/NCCIC_ICS-CERT_Defense_in_Depth_2016_S508C.pdf
-
Recommended Practices
https://us-cert.cisa.gov/ics/tips/ICS-TIP-12-146-01B
-
Recommended Practices
https://us-cert.cisa.gov/ncas/tips/ST04-014