CVEvulnerability
CVE-2009-0209
6.4 MEDIUM
Official page ↗
- Status
- Modified
- Published
- 2009-10-01
- Last modified
- 2026-06-16
- Assigner
- [email protected]
- CVSS 2.0 ([email protected])
- 6.4 MEDIUM — AV:N/AC:L/Au:N/C:P/I:P/A:N
- Weaknesses
- CWE-310
Description
PI Server in OSIsoft PI System before 3.4.380.x does not properly use encryption in the default authentication process, which allows remote attackers to read or modify information in databases via unspecified vectors.
Affected configurations
• osisoft pi server (<= 3.4.375.99)
• osisoft pi server 2.4
• osisoft pi server 2.6
• osisoft pi server 3.4.363.97
• osisoft pi server 3.4.370
• osisoft pi server 3.4.375.99
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/archive/1/506826/100/0/threaded www.securityfocus.com
- http://www.securityfocus.com/archive/1/506826/100/0/threaded www.securityfocus.com