254 matches found
CVE-2020-10608
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized...
CVE-2020-10610
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or...
Information disclosure
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized...
Race condition
In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive...
Information disclosure
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or...
CVE-2020-10600 OSIsoft PI System
An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure. This can result in blocking queries to PI Data Archive 2018 SP2 and prior versions...
CVE-2020-10602
In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive...
CVE-2020-10606
In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other...
CVE-2020-10606
CVE-2020-10606 affects OSIsoft PI System (multiple products/versions). The issue is incorrect default permissions that allow a local attacker to access and potentially disclose, delete, or modify data if the machine processes PI System data from multiple users (e.g., shared workstations/terminal ...
CVE-2020-10608
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized...
CVE-2020-10610
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or...
PT-2020-12229
Name of the Vulnerable Software and Affected Versions OSIsoft PI System versions 2018 SP2 and prior Description An authenticated remote attacker could crash the PI Archive Subsystem when it is working under memory pressure, resulting in blocked queries to PI Data Archive. Recommendations For...
CVE-2020-10610: Uncontrolled Search Path Element
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privilege level, resulting in unauthorized information disclosure, deletion, or...
PT-2020-12238
Name of the Vulnerable Software and Affected Versions OSIsoft PI System affected versions not specified Description A local attacker can modify a search path and plant a binary to exploit the affected PI System software, taking control of the local computer at Windows system privilege level. This...
CVE-2020-10606: Incorrect Default Permissions
In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software. This exploitation can result in unauthorized information disclosure, deletion, or modification if the local computer also processes PI System data from other...
PT-2020-12233 · Osisoft · Osisoft Pi System
Name of the Vulnerable Software and Affected Versions: OSIsoft PI System affected versions not specified Description: A remote, unauthenticated attacker could crash the PI Network Manager service through specially crafted requests, resulting in blocked connections and queries to the PI Data...
PT-2020-12231
Name of the Vulnerable Software and Affected Versions OSIsoft PI System affected versions not specified Description The issue allows an authenticated remote attacker to crash PI Network Manager due to a race condition, resulting in blocked connections and queries to PI Data Archive. Recommendatio...
CVE-2020-10608: Improper Verification of Cryptographic Signature
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries. This exploitation can target another local user of PI System software on the computer to escalate privilege and result in unauthorized...
PT-2020-12242
Name of the Vulnerable Software and Affected Versions OSIsoft PI System affected versions not specified Description The issue allows an authenticated remote attacker with write access to PI Vision databases to inject code into a display. This could lead to unauthorized information disclosure,...
CVE-2020-10602: NULL Pointer Dereference
In OSIsoft PI System multiple products and versions, an authenticated remote attacker could crash PI Network Manager due to a race condition. This can result in blocking connections and queries to PI Data Archive...