CVEvulnerability
CVE-2018-7500
9.8 CRITICAL
Official page ↗
- Status
- Modified
- Published
- 2018-03-14
- Last modified
- 2026-06-17
- Assigner
- [email protected]
- CVSS 3.0 ([email protected])
- 9.8 CRITICAL — CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
- CVSS 2.0 ([email protected])
- 7.5 HIGH — AV:N/AC:L/Au:N/C:P/I:P/A:P
- Weaknesses
- CWE-264
Description
A Permissions, Privileges, and Access Controls issue was discovered in OSIsoft PI Web API versions 2017 R2 and prior. Privileges may be escalated, giving attackers access to the PI System via the service account.
Affected configurations
• osisoft pi web api (<= 2017)
• osisoft pi web api 2017
• osisoft pi vision 2017
Related
Weakness · not in database (1)
References
- http://www.securityfocus.com/bid/103396 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04 Mitigation, Third Party Advisory, US Government Resource
- http://www.securityfocus.com/bid/103396 Third Party Advisory, VDB Entry
- https://ics-cert.us-cert.gov/advisories/ICSA-18-072-04 Mitigation, Third Party Advisory, US Government Resource