PT-2018-18108 · Osisoft · Osisoft Pi Web Api

Publicado 2018-03-14 · Atualizado 2019-10-09 · CVE-2018-7500

Positive Technologies (AI Summary)

CVSS v3.1

9.8

Crítica

Vetor base

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSIsoft PI Web API versions 2017 R2 and prior

Description A Permissions, Privileges, and Access Controls issue was discovered, allowing privileges to be escalated. This escalation gives attackers access to the PI System via the service account.

Recommendations For OSIsoft PI Web API versions 2017 R2 and prior, update to a version later than 2017 R2 to resolve the issue.

Correção

Enumeração de Fraquezas

CWE-264

Identificadores relacionados

CVE-2018-7500

Produtos afetados

Osisoft Pi Web Api

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7500 · Nota de Segurança
• http://securityfocus.com/bid/103396 · Nota
• https://osv.dev/vulnerability/CVE-2018-7500 · Aviso do Fabricante