CVE-2020-10606

🗓️ 24 Jul 2020 22:55:32Reported by icscertType

Local attacker exploits incorrect permissions in OSIsoft PI System leading to unauthorized information access or modification.

Reporter	Title	Published	Views	Family All 7
Circl	CVE-2020-10606	25 Jul 202002:55	–	circl
Cvelist	CVE-2020-10606	24 Jul 202022:55	–	cvelist
EUVD	EUVD-2020-3054	7 Oct 202500:30	–	euvd
ICS	OSIsoft PI System (Update A)	12 May 202000:00	–	ics
NVD	CVE-2020-10606	24 Jul 202023:15	–	nvd
Prion	Information disclosure	24 Jul 202023:15	–	prion
RedhatCVE	CVE-2020-10606	9 Jan 202609:52	–	redhatcve

NVD

Vulners

Node

osisoft pi_apiRange≤1.6.8.26

osisoft pi_apiRange≤2.0.2.5windows_integrated_security

osisoft pi_buffer_subsystemRange≤4.8.0.18

osisoft pi_connectorRange≤1.0.0.54ping

osisoft pi_connectorRange≤1.1.0.10ethernet/ip

osisoft pi_connectorRange≤1.2.0.6bacnet

osisoft pi_connectorRange≤1.2.0.42dc_systems_rtscada

osisoft pi_connectorRange≤1.2.1.71siemens_simatic_pcs_7

osisoft pi_connectorRange≤1.2.2.79iec_60870-5-104

osisoft pi_connectorRange≤1.3.0.1hart-ip

osisoft pi_connectorRange≤1.3.0.130opc-ua

osisoft pi_connectorRange≤1.3.1.135ufl

osisoft pi_connectorRange≤1.4.0.17cygnet

osisoft pi_connectorRange≤1.5.0.88wonderware_historian

osisoft pi_connector_relayRange≤2.5.19.0

osisoft pi_data_archiveRange≤3.4.430.460

osisoft pi_data_collection_managerRange≤2.5.19.0

osisoft pi_integratorRange≤2.2.0.183business_analytics

osisoft pi_interface_configuration_utilityRange≤1.5.0.7

osisoft pi_to_ocsRange≤1.1.36.0

[
  {
    "product": "OSIsoft PI System multiple products and versions",
    "vendor": "n/a",
    "versions": [
      {
        "status": "affected",
        "version": "OSIsoft PI System multiple products and versions"
      }
    ]
  }
]

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-133-02

21 Nov 2024 04:55Current

7.1High risk

Vulners AI Score7.1

CVSS 24.6

CVSS 3.17.8

EPSS0.00058

CWE-276