CVE-2020-10608

🗓️ 24 Jul 2020 23:15:11Reported by [email protected]Type

nvd

nvd🔗 web.nvd.nist.gov👁 12 Views

Local attacker can plant binary to bypass code integrity check in OSIsoft PI System, escalate privilege, and cause unauthorized info disclosure, deletion, modificatio

Reporter	Title	Published	Views	Family All 8
Circl	CVE-2020-10608	25 Jul 202002:55	–	circl
CVE	CVE-2020-10608	24 Jul 202022:46	–	cve
Cvelist	CVE-2020-10608	24 Jul 202022:46	–	cvelist
EUVD	EUVD-2020-3056	7 Oct 202500:30	–	euvd
ICS	OSIsoft PI System (Update A)	12 May 202000:00	–	ics
OSV	CVE-2020-10608	24 Jul 202023:15	–	osv
Prion	Information disclosure	24 Jul 202023:15	–	prion
RedhatCVE	CVE-2020-10608	9 Jan 202609:54	–	redhatcve

NVD

Node

osisoft pi_apiRange≤1.6.8.26

OR

osisoft pi_apiRange≤2.0.2.5windows_integrated_security

OR

osisoft pi_buffer_subsystemRange≤4.8.0.18

OR

osisoft pi_connectorRange≤1.0.0.54ping

OR

osisoft pi_connectorRange≤1.1.0.10ethernet/ip

OR

osisoft pi_connectorRange≤1.2.0.6bacnet

OR

osisoft pi_connectorRange≤1.2.0.42dc_systems_rtscada

OR

osisoft pi_connectorRange≤1.2.1.71siemens_simatic_pcs_7

OR

osisoft pi_connectorRange≤1.2.2.79iec_60870-5-104

OR

osisoft pi_connectorRange≤1.3.0.1hart-ip

OR

osisoft pi_connectorRange≤1.3.0.130opc-ua

OR

osisoft pi_connectorRange≤1.3.1.135ufl

OR

osisoft pi_connectorRange≤1.4.0.17cygnet

OR

osisoft pi_connectorRange≤1.5.0.88wonderware_historian

OR

osisoft pi_connector_relayRange≤2.5.19.0

OR

osisoft pi_data_archiveRange≤3.4.430.460

OR

osisoft pi_data_collection_managerRange≤2.5.19.0

OR

osisoft pi_integratorRange≤2.2.0.183business_analytics

OR

osisoft pi_interface_configuration_utilityRange≤1.5.0.7

OR

osisoft pi_to_ocsRange≤1.1.36.0

Source	Link
us-cert	www.us-cert.cisa.gov/ics/advisories/icsa-20-133-02

17 Jun 2026 02:48Current

7.5High risk

Vulners AI Score7.5

CVSS 24.6

CVSS 3.17.8

EPSS0.00223

osisoft pi system code integrity check privilege escalation unauthorized information disclosure deletion modification