CVE-2017-7934

An Improper Authentication issue was discovered in OSIsoft PI Server 2017 PI Data Archive versions prior to 2017. PI Network Manager using older protocol versions contains a flaw that could allow a malicious user to authenticate with a server and then cause PI Network Manager to behave in an undefined manner.

Score

CVSS 3.0 5.9 Medium

Status

Modified - ics-cert@hq.dhs.gov

Published

2017-08-25

Last modified

2024-08-05

Weaknesses

CWE-287

Affected products

• Pi Data Archive (Osisoft)

References

• http://www.securityfocus.com/bid/99059
• https://ics-cert.us-cert.gov/advisories/ICSA-17-164-02