PT-2018-8515 · Osisoft · Pi Vision+1

Publicado 2018-05-25 · Atualizado 2019-10-09 · CVE-2017-9641

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PI Coresight 2016 R2

Description The issue is a cross-site request forgery vulnerability that may allow access to the PI system.

Recommendations For PI Coresight 2016 R2, upgrade to PI Vision 2017 or greater to mitigate this issue.

Correção

CSRF

Enumeração de Fraquezas

CWE-352

Identificadores relacionados

CVE-2017-9641

Produtos afetados

Pi Coresight

Pi Vision

Referências · 5

• https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04 · Nota
• https://osv.dev/vulnerability/CVE-2017-9641 · Aviso do Fabricante
• http://securityfocus.com/bid/99540 · Nota
• https://nvd.nist.gov/vuln/detail/CVE-2017-9641 · Nota de Segurança
• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320 · Aviso do Fabricante