CVE-2018-7500

A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.

Score

CVSS 3.0 9.8 Critical

Status

Modified - ics-cert@hq.dhs.gov

Published

2018-03-14

Last modified

2024-08-05

Weaknesses

CWE-264

Affected products

• Pi Vision (Osisoft)
• Pi Web Api (Osisoft)

References

• http://www.securityfocus.com/bid/103396
• https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04