Description
A remote attacker with write access to PI Vision could inject code into a display. Unauthorized information disclosure, modification, or deletion is possible if a victim views or interacts with the infected display using Microsoft Internet Explorer. The impact affects PI System data and other data accessible with victim's user permissions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| OSIsoft | PI Vision | All versions – ≤ 2021 | — |
Advisories 1
- ICSA-21-313-05 OSIsoft PI Vision CISA ICS & IT advisories · Nov 9, 2021