EUVD-2018-19260

Malware in sbrugna...

EUVD-2018-19262

Malware in sbrugna...

EUVD-2018-19258

Malware in sbrugna...

OSIsoft PI Data Archive Code Issue Vulnerability

OSIsoft PI Data Archive is a file archiving and storage component for PI Server from OSIsoft, USA. The component is mainly used for archiving and storing configuration information and time series data. A code issue vulnerability exists in OSIsoft PI Data Archive versions 2018 and 2018 SP2. A remo...

Default configuration

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

CVE-2018-7533

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

CVE-2018-7531

An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server...

CVE-2018-7531

An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server...

CVE-2018-7531

CVE-2018-7531 affects the OSIsoft PI Data Archive (versions 2017 and earlier). The issue is an improper input validation allowing unauthenticated attackers to send unvalidated custom requests that crash the PI Data Archive server, impacting availability (CWE-20). The NVD entry provides a CVSS v3 ...

CVE-2018-7533

CVE-2018-7533 affects OSIsoft PI Data Archive versions 2017 and prior, describing an Incorrect Default Permissions flaw (CWE-276) that may allow privilege escalation to full control of the system due to insecure default configuration. The vulnerability is characterized by a local attack context w...

CVE-2018-7529

A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server...

CVE-2018-7529: Deserialization of Untrusted Data

A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may modify deserialized data to send custom requests that crash the server...

CVE-2018-7531: Improper Input Validation

An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Unauthenticated users may use unvalidated custom requests to crash the server...

CVE-2018-7533: Incorrect Default Permissions

An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior. Insecure default configuration may allow escalation of privileges that gives the actor full control over the system...

PT-2018-18138

Name of the Vulnerable Software and Affected Versions OSIsoft PI Data Archive versions 2017 and prior Description An issue with incorrect default permissions was found, which may allow an actor to escalate privileges and gain full control over the system due to an insecure default configuration...

OSIsoft PI Data Archive Elevation of Privilege Vulnerability

OSIsoft PI Data Archive is an efficient storage and archiving component that enables high performance data retrieval through client software. An elevation of privilege vulnerability exists in OSIsoft PI Data Archive 2017 and prior versions, which can be exploited by an attacker to escalate...

PT-2018-18136

Name of the Vulnerable Software and Affected Versions OSIsoft PI Data Archive versions prior to 2018 Description An issue with improper input validation was found, allowing unauthenticated users to potentially crash the server by sending custom, unvalidated requests. Recommendations For OSIsoft P...

PT-2018-18134

Name of the Vulnerable Software and Affected Versions OSIsoft PI Data Archive versions prior to 2018 Description A Deserialization of Untrusted Data issue allows unauthenticated users to modify deserialized data, potentially sending custom requests that crash the server. Recommendations For OSIso...