PT-2018-18138 · Osisoft · Osisoft Pi Data Archive

Publicado 2018-03-14 · Atualizado 2019-10-09 · CVE-2018-7533

Positive Technologies (AI Summary)

CVSS v3.1

7.8

Alta

Vetor base

AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions OSIsoft PI Data Archive versions 2017 and prior

Description An issue with incorrect default permissions was found, which may allow an actor to escalate privileges and gain full control over the system due to an insecure default configuration.

Recommendations For OSIsoft PI Data Archive versions 2017 and prior, update the configuration to secure default permissions to prevent privilege escalation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Incorrect Default Permissions

Enumeração de Fraquezas

CWE-276

Identificadores relacionados

CVE-2018-7533

Produtos afetados

Osisoft Pi Data Archive

Referências · 4

• https://ics-cert.us-cert.gov/advisories/ICSA-18-072-02 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2018-7533 · Nota de Segurança
• https://osv.dev/vulnerability/CVE-2018-7533 · Aviso do Fabricante
• http://securityfocus.com/bid/103399 · Nota