CVE-2016-4530: Improper Input Validation

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-4518: Improper Input Validation

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

PT-2016-6004

Name of the Vulnerable Software and Affected Versions OSIsoft PI SQL Data Access Server aka OLE DB version 2016 1.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in service outage and data loss, via a message. Recommendations For OSIsoft PI SQL Da...

Command injection

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

CVE-2015-1013

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

CVE-2015-1013: Improper Neutralization of Special Elements used in an SQL Command

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

PT-2015-1384

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF versions 2.6 through 2.7 PI SQL for AF version 2.1.2.19 Description The issue is related to the lack of protection in the SQL query structure, allowing remote authenticated users to bypass intended command restrictions via SQL...

Design/Logic Flaw

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

Code injection

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

CVE-2013-2809

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

PT-2014-2632

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface versions prior to 3.1.2.54 for DNP3 Description The issue allows remote attackers to cause a denial of service, resulting in the shutdown of the interface, by sending a crafted TCP packet. Recommendations For versions prio...

PT-2014-2639

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface versions prior to 3.1.2.54 for DNP3 Description The issue allows physically proximate attackers to cause a denial of service, resulting in the shutdown of the interface, by sending crafted input over a serial line...

CVE-2013-2828: Improper Input Validation

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows physically proximate attackers to cause a denial of service interface shutdown via crafted input over a serial line...

CVE-2013-2809: Improper Input Validation

The DNP Master Driver in the OSIsoft PI Interface before 3.1.2.54 for DNP3 allows remote attackers to cause a denial of service interface shutdown via a crafted TCP packet...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

CVE-2013-2800

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

CVE-2013-2800

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...

CVE-2013-2801

The CVE concerns the OSIsoft PI Interface for IEEE C37.118 (pre-1.0.6.158). It can trigger an invalid read from memory when processing crafted C37.118 configuration packets, leading to a remote denial of service (instance shutdown and data-collection outage). Affected product: PI Interface for IE...

CVE-2013-2801

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

CVE-2013-2800: Undefined Security Weakness

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service memory consumption or memory corruption, instance shutdown, and data-collection outage via crafted C37.118 configuration packets...