EUVD-2016-5505

Malware in sbrugna...

EUVD-2015-1157

Malware in sbrugna...

OSIsoft PI Web API

CVSS v3 9.3 ATTENTION: Exploitable remotely/low skill level to exploit. Vendor: OSIsoft Equipment: PI Web API Vulnerabilities: Permissions, Privileges, and Access Controls; Cross-site Scripting AFFECTED PRODUCTS OSIsoft reports that the vulnerabilities affect the following PI Web API products: PI...

CVE-2017-5153: Insertion of Sensitive Information into Log File

An issue was discovered in OSIsoft PI Coresight 2016 R2 and earlier versions, and PI Web API 2016 R2 when deployed using the PI AF Services 2016 R2 integrated install kit. An information exposure through server log files vulnerability has been identified, which may allow service account passwords...

CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

Design/Logic Flaw

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2016-4518

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2016-4518

CVE-2016-4518 affects OSIsoft PI AF Server prior to 2016.2.8.0, where an authenticated attacker can trigger a denial-of-service by sending a crafted message that the server fails to process correctly. Impact is service outage; exploitation is via authenticated access over the affected port (remot...

PT-2016-5996

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF Server versions prior to 2016 2.8.0 Description The issue allows remote authenticated users to cause a denial of service, resulting in a service outage, by sending a specific message. Recommendations For versions prior to 2016...

CVE-2016-4518: Improper Input Validation

OSIsoft PI AF Server before 2016 2.8.0 allows remote authenticated users to cause a denial of service service outage via a message...

CVE-2015-1013

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

Command injection

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

CVE-2015-1013

CVE-2015-1013 affects OSIsoft PI AF 2.6/2.7 and PI SQL for AF 2.1.2.19. The root cause is an incorrect default permission where the PI SQL (AF) Trusted Users group may include the Everyone account, enabling remote authenticated users to bypass command restrictions by issuing SQL statements. Impac...

CVE-2015-1013: Improper Neutralization of Special Elements used in an SQL Command

OSIsoft PI AF 2.6 and 2.7 and PI SQL for AF 2.1.2.19 do not ensure that the PI SQL AF Trusted Users group lacks the Everyone account, which allows remote authenticated users to bypass intended command restrictions via SQL statements...

PT-2015-1384

Name of the Vulnerable Software and Affected Versions OSIsoft PI AF versions 2.6 through 2.7 PI SQL for AF version 2.1.2.19 Description The issue is related to the lack of protection in the SQL query structure, allowing remote authenticated users to bypass intended command restrictions via SQL...

Hospira LifeCare PCA Infusion System Vulnerabilities

OVERVIEW OSIsoft has identified and reported to NCCIC/ICS-CERT a default permissions vulnerability in PI AF product. OSIsoft has produced a mitigation plan to remove this vulnerability. This vulnerability could be exploited remotely. AFFECTED PRODUCTS OSIsoft reports that the vulnerability affect...