PT-2018-8515 · Osisoft · Pi Vision+1

Published 2018-05-25 · Updated 2019-10-09 · CVE-2017-9641

Positive Technologies (AI Summary)

CVSS v3.1

8.8

High

Base vector

AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions PI Coresight 2016 R2

Description The issue is a cross-site request forgery vulnerability that may allow access to the PI system.

Recommendations For PI Coresight 2016 R2, upgrade to PI Vision 2017 or greater to mitigate this issue.

Fix

CSRF

Weakness Enumeration

CWE-352

Related Identifiers

CVE-2017-9641

Affected Products

Pi Coresight

Pi Vision

References · 5

• https://osv.dev/vulnerability/CVE-2017-9641 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2017-9641 · Security Note
• https://techsupport.osisoft.com/Troubleshooting/Alerts/AL00320 · Vendor Advisory
• https://ics-cert.us-cert.gov/advisories/ICSA-17-192-04 · Note
• http://securityfocus.com/bid/99540 · Note