PT-2013-3940

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface for IEEE C37.118 versions prior to 1.0.6.158 Description The issue allows remote attackers to cause a denial of service, resulting in instance shutdown and data-collection outage, via crafted C37.118 configuration packets...

PT-2013-3939

Name of the Vulnerable Software and Affected Versions OSIsoft PI Interface for IEEE C37.118 versions prior to 1.0.6.158 Description The issue allows remote attackers to cause a denial of service, resulting in memory consumption or memory corruption, instance shutdown, and data-collection outage,...

CVE-2013-2801: Improper Restriction of Operations within the Bounds of a Memory Buffer

The OSIsoft PI Interface for IEEE C37.118 before 1.0.6.158 allows remote attackers to cause a denial of service instance shutdown and data-collection outage via crafted C37.118 configuration packets that trigger an invalid read operation...

CVE-2012-3008

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

Stack overflow

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

CVE-2012-3008

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

CVE-2012-3008: Improper Restriction of Operations within the Bounds of a Memory Buffer

Stack-based buffer overflow in OSIsoft PI OPC DA Interface before 2.3.20.9 allows remote authenticated users to execute arbitrary code by sending packet data during the processing of messages associated with OPC items...

PT-2012-4432

Name of the Vulnerable Software and Affected Versions OSIsoft PI OPC DA Interface versions prior to 2.3.20.9 Description The issue is related to a stack-based buffer overflow that allows remote authenticated users to execute arbitrary code. This is achieved by sending packet data during the...

OSIsoft PI Server provides an insecure authentication mechanism

Overview OSIsoft PI Server provides an insecure authentication mechanism that could allow attackers to read or modify information in databases. Description PI Server is a core component of the OSIsoft PI System.According to a report from C4 Security, OSISoft release notes login required for PI...

C4 SCADA Security Advisory - OSISoft PI Server Authentication Weakness

Background ----------------- Vendor product information, from www.osisoft.com : The PI SystemT brings all operational data into a single system that can deliver it to users at all levels of the company - from the plant floor to the enterprise level. The PI System keeps business-critical data alwa...

Authentication flaw

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

CVE-2009-0209

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...

CVE-2009-0209: Undefined Security Weakness

PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors...