CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2016-4530

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-4518

CVE-2016-4518 affects OSIsoft PI AF Server prior to 2016.2.8.0, where an authenticated attacker can trigger a denial-of-service by sending a crafted message that the server fails to process correctly. Impact is service outage; exploitation is via authenticated access over the affected port (remot...

CVE-2016-4530

CVE-2016-4530 affects the OSIsoft PI SQL Data Access Server (OLE DB) 2016 (1.5). The vulnerability arises from improper input validation in the PI SQL Data Access Server when processing a message from an authenticated connection, enabling a remote denial-of-service that can cause a service outage...

CVE-2016-4530: Improper Input Validation

OSIsoft PI SQL Data Access Server aka OLE DB 2016 1.5 allows remote authenticated users to cause a denial of service service outage and data loss via a message...

CVE-2016-4518: Improper Input Validation

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

OSIsoft PI JDBC Driver and PI ODBC Driver Denial of Service Vulnerabilities

OSIsoft PI JDBC Driver and PI ODBC Driver are drivers for connecting to access databases from OSIsoft, USA. A de-security vulnerability exists in OSIsoft PI JDBC Driver and PI ODBC Driver SQL Data Access Server fails to properly process input, which could be exploited by remote attackers to submi...

PT-2016-5996

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF Server versions prior to 2016 2.8.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a service outage, by sending a specific message. Recommendations For versions prior to 2016...

PT-2016-6004

Name of the Vulnerable Software and Affected Versions OSIsoft PI SQL Data Access Server aka OLE DB version 2016 1.5 Description The issue allows remote authenticated users to cause a denial of service, resulting in service outage and data loss, via a message. Recommendations For OSIsoft PI SQL Da...

OSIsoft PI AF Server Denial of Service Vulnerability

OSIsoft PI System is a suite of data acquisition, analysis, and visualization software, and PI AF Server is the core product of PI System. A security vulnerability exists in OSIsoft PI AF Server SQL Data Access Server that does not properly process input, which can be exploited by remote attacker...

OSIsoft PI SQL Data Access Server Input Validation Vulnerability

OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI SQL Data Access Server. OSIsoft has produced a new version of PI SQL Data Access Server OLE DB 2016 1.5 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS Affected versions of PI...

OSIsoft PI AF Server Input Validation Vulnerability

OVERVIEW OSIsoft has identified an input validation vulnerability in its own PI AF Server. OSIsoft has produced a new version of PI AF Server 2016 to address this issue. This vulnerability could be exploited remotely. AFFECTED PRODUCTS OSIsoft reports that the vulnerability affects the following...

Multiple Vulnerabilities in OSIsoft PI Data Archive

OSIsoft PI System is a suite of data acquisition, analysis, and visualization software.PI Server is the core product of PI System.OSIsoft PI Data Archive is a component of PI Server that enables high-performance data retrieval through client software for efficient storage and archiving. OSIsoft P...

OSIsoft PI Data Archive Server Vulnerabilities

OVERVIEW OSIsoft has identified 56 vulnerabilities in its own PI System software. OSIsoft has produced a new version of Data Archive Version 3.4.395.64 to mitigate these issues. Some of these vulnerabilities could be exploited remotely. AFFECTED PRODUCTS OSIsoft reports that the vulnerabilities...

CVE-2015-1013

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

Command injection

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

CVE-2015-1013

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

CVE-2015-1013

CVE-2015-1013 affects OSIsoft PI AF 2.6/2.7 and PI SQL for AF 2.1.2.19. The root cause is an incorrect default permission where the PI SQL (AF) Trusted Users group may include the Everyone account, enabling remote authenticated users to bypass command restrictions by issuing SQL statements. Impac...

CVE-2015-1013: Improper Neutralization of Special Elements used in an SQL Command

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

PT-2015-1384

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF versions 2.6 through 2.7 PI SQL for AF version 2.1.2.19 Description The issue is related to the lack of protection in the SQL query structure, allowing remote authenticated users to bypass intended command restrictions via SQL...