Vendors / OSIsoft Records 45 All Threatist records
Exploited (KEV) 0 None in CISA KEV
CVSS critical 3
CVSS high 16
Exploited now OSIsoft records in CISA KEV No OSIsoft vulnerabilities are listed in CISA KEV.
Components Products in the NVD configurations · select one to filter the records Priority LOW 37
In OSIsoft PI System multiple products and versions, a remote, unauthenticated attacker could crash PI Network Manager service through specially crafted requests.
CVSS 3.1 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02147 · Published 2020-07-24 · No fix listed CWE-248
Priority LOW 37
A Deserialization of Untrusted Data issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.
CVSS 3.0 HIGH 7.5· Network · No auth · No interaction · EPSS 0.02062 · Published 2018-03-14 · No fix listed CWE-502
Priority LOW 36
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017.
CVSS 3.0 HIGH 7.4· Network · No auth · No interaction · EPSS 0.02012 · Published 2017-08-25 · No fix listed CWE-287
Priority LOW 34
In OSIsoft PI System multiple products and versions, a local attacker can modify a search path and plant a binary to exploit the affected PI System software to take control of the local computer at Windows system privile…
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00433 · Published 2020-07-24 · No fix listed CWE-427
Priority LOW 34
In OSIsoft PI System multiple products and versions, a local attacker can plant a binary and bypass a code integrity check for loading PI System libraries.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00255 · Published 2020-07-24 · No fix listed CWE-347
Priority LOW 34
In OSIsoft PI System multiple products and versions, a local attacker can exploit incorrect permissions set by affected PI System software.
CVSS 3.1 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00309 · Published 2020-07-24 · No fix listed CWE-276
Priority LOW 34
An authenticated remote attacker could crash PI Archive Subsystem when the subsystem is working under memory pressure.
CVSS 3.1 HIGH 7.1· Network · Low privileges · No interaction · EPSS 0.01201 · Published 2020-07-24 · Fixed in 2018 SP2 CWE-476
Priority LOW 34
An Incorrect Default Permissions issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.
CVSS 3.0 HIGH 7.8· Local · Low privileges · No interaction · EPSS 0.00337 · Published 2018-03-14 · No fix listed CWE-276
Priority LOW 31
An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.02147 · Published 2017-08-25 · No fix listed CWE-287
Priority LOW 29
An Improper Input Validation issue was discovered in OSIsoft PI Data Archive versions 2017 and prior.
CVSS 3.0 MEDIUM 5.9· Network · No auth · No interaction · EPSS 0.01384 · Published 2018-03-14 · No fix listed CWE-20
Priority LOW 25
OSIsoft PI System software (Applications using PI Asset Framework (AF) Client versions prior to PI AF Client 2016, Version 2.8.0; Applications using PI Software Development Kit (SDK) versions prior to PI SDK 2016, Versio…
CVSS 3.0 MEDIUM 5.5· Local · Low privileges · No interaction · EPSS 0.00348 · Published 2018-04-03 · No fix listed CWE-437
Open these records in search → All records by CVSS severity
3 16 26 0 0
THREATIST.IORead the docs