PT-2022-8708 · Osisoft · Osisoft Pi Vision 2020

Published 2022-04-18 · Updated 2022-04-26 · CVE-2020-25167

Positive Technologies (AI Summary)

CVSS v3.1

6.5

Medium

Base vector

AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions OSIsoft PI Vision 2020 versions prior to 3.5.0

Description The issue could disclose information to a user with insufficient privileges for an AF attribute.

Recommendations For OSIsoft PI Vision 2020 versions prior to 3.5.0, update to version 3.5.0 or later to resolve the issue.

Fix

Incorrect Authorization

Weakness Enumeration

CWE-863

Related Identifiers

CVE-2020-25167

Affected Products

Osisoft Pi Vision 2020

References · 4

• https://osv.dev/vulnerability/CVE-2020-25167 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2020-25167 · Security Note
• https://cisa.gov/uscert/ics/advisories/icsa-20-315-02 · Note
• https://t.me/cibsecurity/41027 · Telegram Post